Monitor network events

Show dropped packets in real time

cilium monitor --type drop
tool
cilium23 commands
tags
ciliumcnimonitordrop

More cilium commands

  • Inspect BGP peers
    cilium bgp peers

    List BGP peers managed by Cilium BGP control plane

  • Inspect endpoint internals
    cilium-dbg endpoint get <id> -o json | jq '.status.policy'

    Dump full endpoint state: identity, policy enforcement, BPF maps; run inside cilium pod

  • Datapath load balancer table
    cilium-dbg bpf lb list

    List service VIP-to-backend mappings in BPF; verify kube-proxy-free LB programming

  • Conntrack table entries
    cilium-dbg bpf ct list global | head

    Inspect BPF connection-tracking entries; spot stale/leaking flows on a node

  • Trace policy by identity
    cilium-dbg policy trace --src-identity <id> --dst-identity <id> --dport <port>

    Explain allow/deny verdict between two security identities; debug NetworkPolicy drops

all 23 cilium commands