# skydive-project/skydive

An open source real-time network topology and protocols analyzer

Repository: https://github.com/skydive-project/skydive
Canonical: https://ross.abutalabs.com/products/skydive
Homepage: https://skydive.network
Language: Go
License: Apache-2.0
License Family: permissive
Topics: networking, network-topology, flow, monitoring, traffic-analysis, traffic-monitoring, metrics, packet-sniffer, packet-analyzer, pcap, ebpf
Last push: 2025-09-19T17:15:39+00:00

## Health v2 (maintenance only)
Score: 42/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 42, release rhythm 8, longevity 100
- inputs: {"age_days": 3970, "days_push": 348, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2796, forks 414 (observed 2026-08-28T04:07:22.375657+00:00)

## What it is
Skydive is an open source real-time network topology and protocols analyzer that captures network topology and traffic flows across hosts, VMs, and containers. Agents forward topology and flow data to a central analyzer backed by Elasticsearch, queryable via a Gremlin-based language, REST/WebSocket APIs, a web UI, and a CLI.

## Use cases
- troubleshoot network connectivity in OpenStack or Kubernetes environments
- visualize real-time network topology across hosts and containers
- capture and analyze network flows between VMs and containers
- monitor interface metrics and detect abnormal traffic
- follow a flow along its path through the topology
- validate network deployments in CI pipelines
- query historical topology changes to debug past incidents

## When to choose
- you need distributed, real-time visibility into network topology and flows across cloud or container infrastructure
- you want a single static binary that is easy to deploy with a web UI, CLI, and REST API
- you use SDN or cloud platforms like OpenStack, Kubernetes, Docker, or OpenContrail and need topology enrichment
- you need historical topology and flow data stored in Elasticsearch with Grafana integration

## When to avoid
- you only need simple packet capture on a single host (use tcpdump or Wireshark instead)
- you need lightweight host-level metrics monitoring without topology analysis (use Prometheus instead)
- you require a managed SaaS solution rather than self-hosted infrastructure
- your environment is not Linux-based, since Skydive relies on Linux networking features like netlink, netns, and eBPF

## Facets
- artifact type: application
- maturity: active
- function: monitoring, networking, analytics, alerting, tracing
- domain: networking, monitoring, cloud-computing
- platform: go, self-hosted, cli
- tags: network-topology, flow-analysis, packet-capture, sdn, packet-sniffer, ebpf, elasticsearch, gremlin, openstack, grafana, containers, devops, linux, docker, kubernetes, web-server

## Member repositories
- skydive-project/skydive (main) score 42

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:22.375657+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T08:14:39.562666+00:00, confidence not recorded.
  - readme: https://github.com/skydive-project/skydive (fetched 2026-08-28T04:07:22.375657+00:00, sha 91b164a33cf5)
  - homepage: https://skydive.network (fetched 2026-08-29T09:54:51.157026+00:00, sha 737b42b57414)
  - site_page: https://skydive.network/documentation (fetched 2026-08-29T09:54:51.166332+00:00, sha f9f2779cec12)
  - site_page: https://skydive.network/documentation/getting-started (fetched 2026-08-29T09:54:51.168336+00:00, sha 1ff453e472d2)
- Data as of 2026-08-30T08:39:29.467469+00:00.