cilium monitor

Display BPF program events

Synopsis

The monitor displays notifications and events emitted by the BPF programs attached to endpoints and devices. This includes:

  • Dropped packet notifications
  • Captured packet traces
  • Policy verdict notifications
  • Debugging information
  1. cilium monitor [flags]

Options

  1.       --from []uint16           Filter by source endpoint id
  2.   -h, --help                    help for monitor
  3.       --hex                     Do not dissect, print payload in HEX
  4.   -j, --json                    Enable json output. Shadows -v flag
  5.       --monitor-socket string   Configure monitor socket path
  6.   -n, --numeric                 Display all security identities as numeric values
  7.       --related-to []uint16     Filter by either source or destination endpoint id
  8.       --to []uint16             Filter by destination endpoint id
  9.   -t, --type []string           Filter by event types [agent capture debug drop l7 policy-verdict recorder trace]
  10.   -v, --verbose bools[=false]   Enable verbose output (-v, -vv) (default [])

Options inherited from parent commands

  1.       --config string   config file (default is $HOME/.cilium.yaml)
  2.   -D, --debug           Enable debug messages
  3.   -H, --host string     URI to server-side API

SEE ALSO