Skip to content

Dsnitch

A single-binary, lightweight, zero-configuration, real-time terminal UI (TUI) network and DNS egress inspector for Docker containers powered by modern Linux eB…

Developer ToolsDesignunknown
Dsnitch screenshot

About Dsnitch

A single-binary, lightweight, zero-configuration, real-time terminal UI (TUI) network and DNS egress inspector for Docker containers powered by modern Linux eBPF.

Zero-Touch Container Attribution : Attaches directly to the host's unified cgroup v2 hierarchy ( /sys/fs/cgroup ) via eBPF. Zero sidecars, proxies, or container agent injections required.

In-Kernel DNS Snooping & Userspace Enrichment : Intercepts raw UDP/53 packet payloads in kernel space via eBPF ring buffers, with userspace Hickory DNS decoding the records to map IP endpoints to domain names (with full CNAME chain resolution) per container cgroup.

Deterministic Stateful Socket Tracking ( skaddr ) : Hooks kernel sock:inet_sock_set_state to track the full lifecycle of TCP connections ( ● ACTIVE -> ○ CLOSED ) keyed by physical 64-bit kernel memory pointers ( skaddr ), guaranteeing 100% collision-free tracking across concurrent connections and network namespaces.

Dual Destination & Physical IP Columns : Clean separation between DNS-resolved hostnames ( api.github.com:443 ) and underlying edge IP endpoints ( 20.207.73.85:443 ).

Glibc Noise Filtering : Intelligently skips dummy POSIX/glibc getaddrinfo() UDP port 0 route-lookup probes.

Discussion

Sign in to join the discussion.

Loading comments…

Tagged

Alternatives to Dsnitch

Tools in the same space, ranked by how they are performing in the directory.

Compare all

  • Pktscope

    Wireshark-style terminal packet analyzer on eBPF/TCX — live packet list, protocol detail tree, section-colorized hex; works on raw-IP tunnel devices - yeet-src…

    /Developer Tools

  • Reachpad CLI

    The reachpad CLI: workspaces where Claude, Codex and other coding agents build full-stack apps and share them by link, from your terminal.

    /Developer Tools

  • Termux Dev

    ⚡ Ultra-fast terminal AI coding agent & vibe-coding assistant built for Android (Termux), Windows, macOS & Linux.

    /Developer Tools

  • Hrdx

    Yet another minimal and lightweight terminal multiplexer built for the agent era.

    /Developer Tools

  • Ramanujan

    The Ramanujan Platform aims to harness the idle computational power of various digital devices to create a powerful distributed network.

    /Developer Tools

  • Kveritas Go

    K-Veritas CLI -- tamper-evident verification for Computational Experiments - 27-GROUP/kveritas-go

    Open source/Design