hengyoush/kyanos

Health v2 · maintenance only

Adoption not part of the score

5066 stars · 235 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Kyanos is an eBPF-based command-line network analysis tool that captures and visualizes L7 requests/responses (HTTP, Redis, MySQL, Kafka, MongoDB, RocketMQ, DNS) and the time packets spend in the kernel. It supports filtering by process, container, K8s pod, and protocol fields, plus aggregation analysis for fast troubleshooting.

Use cases

• troubleshoot slow HTTP requests on a Linux server
• find which IPs are consuming my service's bandwidth
• capture Redis or MySQL traffic without tcpdump
• measure container-to-host network latency
• filter network traffic by process PID or container ID
• aggregate request latency by remote IP and protocol
• diagnose network issues inside Kubernetes pods

When to choose

• you need L7 protocol-aware capture and latency analysis on Linux
• you want tcpdump-like capture but with aggregation and TUI output
• you troubleshoot network issues in containerized or K8s environments
• you need to see kernel-side packet latency

When to avoid

• you need packet capture on macOS, Windows, or BSD
• you need a GUI-based packet analyzer like Wireshark
• your kernel is older than 3.10 (amd64) or 5.5 (arm64)
• you need full raw packet dumps for offline analysis

Facets

cli-tool · maturity active

monitoring tracing developer-tools networking networking developer-tools monitoring cli ebpf packet-capture network-troubleshooting tcpdump-alternative l7-protocols tui observability kernel-latency-analysis command-line containers linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hengyoush/kyanos")