Sysdig presented for the first time at Cloud Field Day this past spring. Joep Piscaer was one of the delegates at the event and got to hear about the company’s solutions at length. In this piece, he looks at how Sysdig solves the problem of getting packet-level telemetry from containersnwithout accessing the underlying network stack. They do this using kernel-native instrumentation via eBPF to capture system calls and other OS events from containers, without having to create additional containers in the process. For Joep, that’s a key consideration.