11/6/2017 Container Troubleshooting and Linux Visibility | Sysdig

NW Run-time securit for containers Learn more

(/) (//ssdig.com/product/secure)

sdig Monitor

Open source Check out our enterprise
container monitoring product
ouleshooting aa or On-Prem
tool
Visit ssdig.com (https://ssdig.com/ssdig/?u

sdig captures sstem calls and events from the Linux kernel. 
You can save, filter, and analze the data with our CLI or our desktop app. 
Think of ssdig as strace + tcpdump + htop + iftop + lsof + wireshark for our
entire sstem.

https://www.sysdig.org/ 1/5
11/6/2017 Container Troubleshooting and Linux Visibility | Sysdig

A quick preview of sdig's new interactive UI 
(/) sdig Inspect




Get it now (https://githu.com/draios/ssdig-inspect)
Get it Now (/install/)

...and a little taste of what sdig can do from the command
line

Dump sstem activit to file, so that ssdig can e used to process it later.

~$ udo dig -w trace.cap

View the top network connections for a single container.
~$ udo dig -pc -c topconn container.name=wordpre1
https://www.sysdig.org/ 2/5
11/6/2017 Container Troubleshooting and Linux Visibility | Sysdig

(/)

ee the files where apache spends the most time doing I/O.

~$ udo dig -c topfile_time proc.name=httpd

how all the interactive commands executed inside a given container.

~$ udo dig -pc -c p_uer container.name=wordpre1

how ever time a file is opened under /etc.

~$ udo dig evt.tpe=open and fd.name contain /etc

ee more examples (/wiki/ssdig-examples/)

Resources
Tr sdig in our rowser in this online course (https://katacoda.com/ssdig/)
Wh we created sdig (https://ssdig.com/log/announcing-ssdig/)
sdig v Dtrace vs trace: A Technical Discussion (https://ssdig.com/log/ssdig-vs-
dtrace-vs-strace-a-technical-discussion/)
https://www.sysdig.org/ 3/5
11/6/2017 Container Troubleshooting and Linux Visibility | Sysdig

Trouleshooting Kuernetes DN with sdig (https://ssdig.com/log/understanding-
how-kuernetes-services-dns-work/)
(/) How I found a ug in Amazon L (https://ssdig.com/log/amazon-el-ug/)
The Dawn of Dead nds: Finding a Kafka Memor Leak (https://log.heroku.com/fixing-
kafka-memor-leak)
50 hades of stem Calls (https://ssdig.com/log/50-shades-of-sstem-calls/)
Linux Trouleshooting Cheat heet (https://ssdig.com/log/linux-trouleshooting-
cheatsheet/)
sdig Cheat heet (http://go.ssdig.com/l/231542/2016-12-
19/2z91/231542/6318/sdig_cheat_sheet_2017_download_version.pdf)

Also check out Falco - the open source, ehavioral securit monitor with container
support.

Get more info (http://ssdig.org/falco)

sdig

Home (http://ssdig.org)
Install Guide (/install/)
Wiki (/wiki/)

sdig Monitor
Home (https://ssdig.com/?utm_source=Wesite&utm_campaign=ssdig-org-referral&utm_medium=text-
hperlink&utm_sfdccampaign=701j0000002Hsn&utm_offer=&utm_content=&utm_term=)
Product (http://www.ssdig.com/product/)
Pricing (http://www.ssdig.com/pricing/)
Compan (http://www.ssdig.com/compan/)
log (http://www.ssdig.com/log/)
upport (http://support.ssdig.com/hc/en-us)
License Agreement (https://ssdig.com/wp-content/uploads/2015/07/sdig-Cloud-License-Agreement.pdf)

https://www.sysdig.org/ 4/5
11/6/2017 Container Troubleshooting and Linux Visibility | Sysdig

   (https://slack.ssdig.com/)
(/)
(https://githu.com/draios/
(https://twitter.com/ssdig)
Copright © 2016 Draios, Inc. All Rights Reserved.

https://www.sysdig.org/ 5/5