Sysdig is a powerful system exploration and troubleshooting tool that captures system state and activity. It combines features of strace, tcpdump, htop, and lsof into one comprehensive tool.
📑 Table of Contents
Key Features
- System Calls: Trace system activity
- Network Analysis: Packet capture capabilities
- Container Aware: Docker and Kubernetes support
- Filtering: Powerful filter expressions
- Chisels: Pre-built analysis scripts
Installation
Install Sysdig on Ubuntu:
curl -s https://s3.amazonaws.com/download.draios.com/stable/install-sysdig | sudo bash
Usage Examples
Sysdig operations:
# Capture all system activity
sudo sysdig
# Filter by process
sudo sysdig proc.name=nginx
# Network connections
sudo sysdig -c netstat
# Top processes by CPU
sudo sysdig -c topprocs_cpu
# Container activity
sudo sysdig -pc container.name=myapp
# Save to file
sudo sysdig -w capture.scap
Benefits
Sysdig provides unprecedented visibility into system behavior. Its container awareness and powerful filtering make it essential for modern infrastructure troubleshooting.
Was this article helpful?