A wireshark stack in docker used to capture packets isolated at the container level.

To use this example do the following:

1. Edit the docker-compose.override.yml file and add the details for running your app. The service name must be app to work with the main docker-compose.yml file. Alternatively, you can set the APP_NAME env variable to the name of your running container and the wireshark container will connect to that.

2. Run the VNC desktop container so you can see wireshark.

docker-compose up -d desktop

3. Open your browser to http://localhost:6080. After the desktop loads, continue to step 4.

4. Start the wireshark service (dependency is your app service):

docker-compose up -d wireshark

You should see the wireshark GUI in the VNC browser session.

When done, run this to tear everything down:

docker-compose down

To run all of the steps with blocking automation:

APP_NAME=app make -e

When you are done:

make clean