--- title: "Introducing Fast, Automated Packet Capture for Kubernetes" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-fast-automated-packet-capture-for-kubernetes/" description: "Calico Enterprise PacketCapture reduces the time and effort required for operators to rapidly and effectively troubleshoot a connectivity issue." --- [Technical Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/technical-blog/) # Introducing Fast, Automated Packet Capture for Kubernetes By [John Armstrong](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/john-armstrong/) on Nov 10, 2020 • 3 min read If you’re an SRE or on a DevOps team working with [Kubernetes](http://kubernetes.io/) and containers, you’ve undoubtedly encountered network connectivity issues with your microservices and workloads. Something is broken and you’re under pressure to fix it, quickly. And so you begin the tedious, manual process of identifying the issue using the observability tools at your disposal…namely metrics and logs. However, there are instances where you may need to go beyond these tools to confirm a potential bug with applications running in your cluster. ## What is packet capture? Packet capture is a valuable technique for debugging microservices and application interaction in day-to-day operations and incident response. But generating pcap files to diagnose connectivity issues in Kubernetes clusters can be a frustrating exercise in a dynamic environment where hundreds, possibly thousands of pods are continually being created and destroyed. First, you would need to identify on which node your workload is running, match your workload against its host-based interface, and then (with root access to the node) use [tcpdump](http://www.tcpdump.org/manpages/tcpdump.1.html) to generate a file for packet analysis. Then you would need to transfer the pcap files to your laptop and view them in [Wireshark](http://www.wireshark.org/). If this doesn’t initially generate the information you need to identify and resolve the issue, you may have to repeat it again, potentially on another node and interface. ## Calico’s packet capture for Kubernetes Calico Enterprise from Tigera introduces a new resource type called *PacketCapture* that automates and simplifies this cumbersome process by providing a Kubernetes-native way to capture packets from your deployments. It also provides a command-line interface to easily transfer any generated pcap files distributed across nodes directly to your local machine for analysis with tools like Wireshark. Utilizing the same label-based selectors that are used for network policies, Calico Enterprise *PacketCapture* can identify a single or multiple workload endpoints for capturing live traffic. *PacketCapture* generates pcap files on the nodes associated with pods targeted for packet capture, and automatically manages the data retention and collection of generated files in a secure way. This significantly reduces the effort and time required to perform packet capture and analysis, and ultimately resolve connectivity issues. Additionally, RBAC can be enabled with *PacketCapture* and user permissions are enforced using the standard Kubernetes RBAC based on Role and RoleBindings within a namespace. This further reduces admin overhead and makes *PacketCapture* an ideal solution for self-service environments and DevOps and service owners who desire greater autonomy, but require some guardrails. Packet capture in the context of Kubernetes is time consuming. Calico Enterprise’s automated, Kubernetes-native approach significantly reduces the time and effort it takes for operators to get the network diagnostics they need to rapidly and effectively troubleshoot a connectivity issue. **Want to learn more?** [**Free Online Training**](https://wordpress-1075849-4005834.cloudwaysapps.com/events/) Access Live and On-Demand Kubernetes Training [**Calico Enterprise – Free Trial**](https://www.calicocloud.io/home) Kubernetes Networking, Security and Observability in Hybrid and Multi-Clouds [Products](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/products/)[Announcements](https://wordpress-1075849-4005834.cloudwaysapps.com/tags/announcements/) Add Tigera as a preferred source on Google to see more of our content in your search results. [![Add as a preferred source on Google](https://wordpress-1075849-4005834.cloudwaysapps.com/app/themes/tigera2021/dist/img/google-preferred-source-light.png)](https://www.google.com/preferences/source?q=tigera.io) ## Related posts [![Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Kubecon-Euro-2026-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) [Company Blog](https://wordpress-1075849-4005834.cloudwaysapps.com/category/company-blog/) #### [Join Calico at KubeCon Europe 2026: AI Agents, Silent Discos, and Dutch Delights!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 25, 2026 The cloud-native community is heading to the historic canals and vibrant tech scene of Amsterdam for KubeCon + CloudNativeCon Europe 2026! From March 23–26, Amsterdam will be buzzing with the latest in Kubernetes, platform engineering,... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/calico-at-kubecon-cloudnativecon-europe2026/) [![Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/02/Blog-Hackathon-.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) #### [Project Calico 3.30+ Hackathon: Show Us What You Can Build!](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Feb 17, 2026 Build the Future of Cloud-Native Networking! 🚀 The Calico community moves fast. With the releases of Calico 3.30 and 3.31, brings improvements in scalability, network security, and visibility. Now, we want to see what YOU... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/project-calico-3-30-hackathon-show-us-what-you-can-build/) [![Introducing the New Tigera & Calico Brand](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/01/New-logo-blog-1200x628-1.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-the-new-tigera-calico-brand/) #### [Introducing the New Tigera & Calico Brand](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-the-new-tigera-calico-brand/) By [Tigera Team](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/author/marketingtigera-io/) on Jan 30, 2026 Same community. A clearer, more unified look. Today, we are excited to share a refresh of the Tigera and Calico visual identity! This update better reflects who we are, who we serve, and where we... [Read more](https://wordpress-1075849-4005834.cloudwaysapps.com/blog/introducing-the-new-tigera-calico-brand/)