You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Since we [introduced the Network Observability CLI](./2024-07-25-cli.md), numerous features have been added. This article will cover the improvements in version 1.8 and provide some concrete examples.
21
+
Since we [introduced the Network Observability CLI](./2024-07-25-cli.md), numerous features have been added. This article covers the improvements in version 1.8 and provide some concrete examples.
22
22
23
23
## New Options Available
24
24
This update adds several options to the CLI, covering more scenarios and enabling scripting on top of the tool.
25
25
26
26
### Operate in the Background
27
27
The `--background` option allows you to start a flow or packet capture without connecting your terminal to the **collector pod**. This enables you to let the capture run in the background while you work on something else.
28
28
You can check the capture's progress using the `follow` command.
29
-
The capture will end automatically when either maximum bytes (50MB) or time (5m) is reached. You can update these accordingly using the `--max-bytes` and `--max-time` options.
29
+
The capture is ending automatically when either maximum bytes (50MB) or time (5m) is reached. You can update these accordingly using the `--max-bytes` and `--max-time` options.
30
30
The `stop` command also allows you to end the capture manually.
31
31
In both cases, the collector pod keeps running to let you download the output locally using the `copy` command.
32
32
Once the job is complete, you `cleanup` everything.
@@ -44,16 +44,16 @@ oc netobserv cleanup # Remove all
44
44
```
45
45
46
46
### Customizable Namespace
47
-
You can now customize the capture namespace using the `NETOBSERV_NAMESPACE` environment variable. When the CLI starts, it automatically checks if this namespace exists and will stop if it finds any conflict with a pending capture. This is particularly useful if you want to run captures in parallel.
47
+
You can now customize the capture namespace using the `NETOBSERV_NAMESPACE` environment variable. When the CLI starts, it automatically checks if this namespace exists and stops if it finds any conflict with a pending capture. This is particularly useful if you want to run captures in parallel.
The tool can now read OpenShift configurations from `cluster-config-v1` and `network` to identify **Machine**, **Pods**, and **Services** subnets using the `--get-subnets` option. This will automatically add`SrcSubnetLabel` and `DstSubnetLabel` to your flows.
54
+
The tool can now read OpenShift configurations from `cluster-config-v1` and `network` to identify **Machine**, **Pods**, and **Services** subnets using the `--get-subnets` option. This automatically adds`SrcSubnetLabel` and `DstSubnetLabel` to your flows.
55
55
56
-
You will see subnets being configured during the creation of the agents:
56
+
You can see subnets being configured during the creation of the agents:
You will see filters being validated during the creation of the agents:
84
+
You can see filters being validated during the creation of the agents:
85
85
```sh
86
86
creating flow-capture agents:
87
87
opt: filter_protocol, value: TCP
@@ -97,7 +97,7 @@ You can add up to 16 sets of filters separated by the `or` operator to create mu
97
97
### Regular Expressions Usage
98
98
If you need to filter on enriched content beyond the agent-level filters, you can use **regexes** to match any field/value pair. To keep only the traffic from OpenShift namespaces, for example, you can use `--regexes=SrcK8S_Namespace~openshift.*`.
99
99
100
-
You will see regexes being validated during the creation of the agents:
100
+
You see regexes being validated during the creation of the agents:
Regexes are comma-separated, so you can use multiple at once, such as `--regexes=SrcK8S_Namespace~my-ns,SrcK8S_Name~my-app`. Refer to the [flows format](https://github.com/netobserv/network-observability-operator/blob/main/docs/flows-format.adoc) to see the possible fields.
110
110
111
111
## Unified Collector User Experience
112
-
All filtering capabilities are now supported for**packets** capture and will display enriched data while collecting. This improvement was made possible by introducing the [flowlogs-pipeline](https://github.com/netobserv/flowlogs-pipeline) component inside [eBPF agents](https://github.com/netobserv/netobserv-ebpf-agent), which parses packets and generates flows from them.
112
+
All filtering capabilities are now supported for**packets** capture and displays enriched data while collecting. This improvement was made possible by introducing the [flowlogs-pipeline](https://github.com/netobserv/flowlogs-pipeline) component inside [eBPF agents](https://github.com/netobserv/netobserv-ebpf-agent), which parses packets and generates flows from them.
113
113
114
114
Run a packet capture on a specific port for example:
On top of the features, you can use all the filtering capabilities mentioned above to focus on what you're looking for. A `NetObserv / On Demand` dashboard will be automatically created, showing the results.
132
+
On top of the features, you can use all the filtering capabilities mentioned above to focus on what you're looking for. A `NetObserv / On Demand` dashboard is automatically created, showing the results.
0 commit comments