kubeshark

Network Observability for SREs & AI Agents

Live Demo · Docs

---

Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics.

**What you can do:**

• Download Retrospective PCAPs — cluster-wide packet captures filtered by nodes, time, workloads, and IPs. Store PCAPs for long-term retention and later investigation.
• Visualize Network Data — explore traffic matching queries with API, Kubernetes, or network semantics through a real-time dashboard.
• See Encrypted Traffic in Plain Text — automatically decrypt TLS/mTLS traffic using eBPF, with no key management or sidecars required.
• Integrate with AI — connect your favorite AI assistant (e.g. Claude, Copilot) to include network data in AI-driven workflows like incident response and root cause analysis.

---

Get Started

helm repo add kubeshark https://helm.kubeshark.com
helm install kubeshark kubeshark/kubeshark
kubectl port-forward svc/kubeshark-front 8899:80

Open `http://localhost:8899` in your browser. You're capturing traffic.

For production use, we recommend using an [ingress controller](https://docs.kubeshark.com/en/ingress) instead of port-forward.

**Connect an AI agent** via MCP:

brew install kubeshark
claude mcp add kubeshark -- kubeshark mcp

[MCP setup guide →](https://docs.kubeshark.com/en/mcp)

---

Network Data for AI Agents

...