pkg.soopen package index

brew / rank 2619

Install kubeshark with Homebrew, Nix, scoop

API Traffic Analyzer providing real-time visibility into Kubernetes network. Version 53.3.0 via Homebrew; verified 2026-07-27. Also installable with nix: nix profile install nixpkgs#kubeshark.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install kubeshark

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#kubeshark

nixpkgs package indexes · pkgs/by-name/ku/kubeshark/package.nix · source: api.github.com

Windows

Scoopverified · 92%
scoop install main/kubeshark

Scoop official bucket manifest trees · bucket/kubeshark.json · source: api.github.com

overview

Package summary

API Traffic Analyzer providing real-time visibility into Kubernetes network

Commands and aliases

  • kubeshark

history

Project history and usage

Kubeshark is a Kubernetes network observability tool that indexes cluster-wide traffic with Kubernetes, API, and network context. The project presents itself as eBPF-powered observability for SREs and AI agents.

Project history

Kubeshark's repository describes a tool that captures and indexes network traffic at the kernel level, exposes filtered PCAP downloads, visual dashboards, TLS and mTLS visibility, protocol parsing, and MCP access for AI-driven incident response. Its documentation packages the product around Helm deployment plus a CLI installed through Homebrew or downloaded from GitHub releases.

The late-2025 and 2026 release notes show an active transition into a V2 architecture: v52.11.0 on December 16, 2025 described the first release in preparation for V2.00 and a backend refactor, while v53.3.0 on May 19, 2026 highlighted TLSX dissector behavior, authorization refactoring, L7 data boundaries, snapshots, and AI skills.

Adoption history

Kubeshark fits into the Kubernetes observability niche for teams that need packet-level or protocol-level visibility without changing application code. The package-manager angle is important because the CLI drives local workflows such as tapping traffic, cleaning deployments, connecting MCP clients, and installing the Helm chart.

How it is used

Users install Kubeshark with Helm or Homebrew, port-forward the frontend service, and query live or retained traffic through the dashboard, KFL filters, PCAP exports, APIs, or MCP integrations.

Why package nerds care

Kubeshark is notable because it packages a cluster-resident observability system behind a developer-friendly CLI. It also bridges traditional packet-analysis workflows with Kubernetes metadata and newer MCP-based AI-agent workflows.

Timeline

  • 2025: v52.11.0 was released on December 16 as the first release preparing for V2.00 and introduced a refactored backend path.
  • 2026: v52.11.7 was released on January 15 with a complementary license for clusters up to 100 nodes.
  • 2026: v53.3.0 was released on May 19 with TLSX enabled by default, authorization changes, L7 data boundaries, snapshot filters, and AI skills.

Related projects

  • Related projects and concepts include Kubernetes, Helm, eBPF, Wireshark, tcpdump, PCAP tooling, KFL, and Model Context Protocol integrations.

security posture

Risk level: orange

infrastructure mutation or orchestration signal.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • infrastructure mutation or orchestration signal

Signals

  • text:kubernetes

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
kubesharkexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version53.3.0
manager updated2026-07-27
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:kubeshark
Version53.3.0
Package managerHomebrew
Homepagehttps://kubeshark.com
Repositoryhttps://github.com/kubeshark/kubeshark
Last updated2026-07-27T21:58:47+02:00
Pulseupdated
Bottlenot recorded
Servicenone declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

kubeshark

nix profile install nixpkgs#kubeshark
  • normalized package name match
  • Matched by: Kubeshark
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ku/kubeshark/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Scoop95%

main/kubeshark

scoop install main/kubeshark
  • normalized package name match
  • Matched by: Kubeshark
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/kubeshark.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation