Packet capture inside windows docker container

Asked Jan 23 '18 at 15:22

Active Jul 18 '18 at 19:13

Viewed 1,898 times

Is it possible to capture tcp packets inside a windows docker container? (using an image ultimately based on microsoft/windowsservercore)

netsh trace start fails with The inbox capture driver could not be started (error=0x800106d9)

New-NetEventSession -CaptureMode SaveToFile -Name cat -LocalFilePath c:\cat.etl fails with A general error occurred that is not covered by a more specific error code

(context - I'm trying to debug a networking issue, whereby a dockerised application seems to stop receiving data over an established connection after a period of time. I can run a trace on the docker host and see data getting forwarded to the container; I'd like to be able to do the same from within the container to see if it shows up there, too)

asked Jan 23 '18 at 15:22

Duncan

1,183
2
12
22

You sure you are not running into this https://github.com/moby/moby/issues/34355 – Gregory Suvalian Jan 23 '18 at 15:48
@GregorySuvalian I don't think so - my issue is with an existing tcp connection that stops working after a while (interesting link though - wasn't aware of that) – Duncan Jan 23 '18 at 16:03
Did you find any way to fix this? I also tried installing nmap, winpcap and all of them but nothing seems to be working! – Roozbeh G Aug 23 '18 at 19:30
@RoozbehG, Did you find any way to fix this? – Maya May 21 '19 at 09:02

Packet capture inside windows docker container

0 Answers0