# Dsnitch

> A single-binary, lightweight, zero-configuration, real-time terminal UI (TUI) network and DNS egress inspector for Docker containers powered by modern Linux eB…

- **Website:** https://github.com/infomaniac777/dsnitch
- **Pricing:** unknown
- **Categories:** Developer Tools, Design
- **Tags:** developer-tools, design, ai-agents
- **Platforms:** macOS, Linux, CLI
- **Last verified:** 2026-09-10
- **Canonical page:** https://linkrena.com/tools/dsnitch

## About

A single-binary, lightweight, zero-configuration, real-time terminal UI (TUI) network and DNS egress inspector for Docker containers powered by modern Linux eBPF.

Zero-Touch Container Attribution : Attaches directly to the host's unified cgroup v2 hierarchy ( /sys/fs/cgroup ) via eBPF. Zero sidecars, proxies, or container agent injections required.

In-Kernel DNS Snooping & Userspace Enrichment : Intercepts raw UDP/53 packet payloads in kernel space via eBPF ring buffers, with userspace Hickory DNS decoding the records to map IP endpoints to domain names (with full CNAME chain resolution) per container cgroup.

Deterministic Stateful Socket Tracking ( skaddr ) : Hooks kernel sock:inet_sock_set_state to track the full lifecycle of TCP connections ( ● ACTIVE -> ○ CLOSED ) keyed by physical 64-bit kernel memory pointers ( skaddr ), guaranteeing 100% collision-free tracking across concurrent connections and network namespaces.

Dual Destination & Physical IP Columns : Clean separation between DNS-resolved hostnames ( api.github.com:443 ) and underlying edge IP endpoints ( 20.207.73.85:443 ).

Glibc Noise Filtering : Intelligently skips dummy POSIX/glibc getaddrinfo() UDP port 0 route-lookup probes.

## Related tools

- [Pktscope](https://linkrena.com/tools/pktscope): Wireshark-style terminal packet analyzer on eBPF/TCX — live packet list, protocol detail tree, section-colorized hex; works on raw-IP tunnel devices - yeet-src…
- [Reachpad CLI](https://linkrena.com/tools/reachpad-cli): The reachpad CLI: workspaces where Claude, Codex and other coding agents build full-stack apps and share them by link, from your terminal.
- [Termux Dev](https://linkrena.com/tools/termux-dev): ⚡ Ultra-fast terminal AI coding agent & vibe-coding assistant built for Android (Termux), Windows, macOS & Linux.
- [Hrdx](https://linkrena.com/tools/hrdx): Yet another minimal and lightweight terminal multiplexer built for the agent era.
- [Ramanujan](https://linkrena.com/tools/ramanujan): The Ramanujan Platform aims to harness the idle computational power of various digital devices to create a powerful distributed network.
- [Kveritas Go](https://linkrena.com/tools/kveritas-go): K-Veritas CLI -- tamper-evident verification for Computational Experiments - 27-GROUP/kveritas-go