https://issues.redhat.com/browse/SDN-1760 $ oc adm must-gather --dest-dir ./tmp --source-dir '/tmp/tcpdump/' --image quay.io/openshift/origin-network-tools:latest --node-selector 'kubernetes.io/os=linux,node-role.kubernetes.io/master' --host -- timeout 30 tcpdump -i any Error: unknown flag: --node-selector See 'oc adm must-gather --help' for usage. $ oc adm must-gather --dest-dir ./tmp --source-dir '/tmp/tcpdump/' --image quay.io/openshift/origin-network-tools:latest --node-name 'kubernetes.io/os=linux,node-role.kubernetes.io/master' --host -- timeout 30 tcpdump -i any Error: unknown flag: --host See 'oc adm must-gather --help' for usage. oc adm must-gather --dest-dir ./tmp --source-dir '/tmp/tcpdump/' --image quay.io/openshift/origin-network-tools:latest --node-name 'kubernetes.io/os=linux,node-role.kubernetes.io/master' -- timeout 30 tcpdump -i any -w /tmp/tcpdump/\$POD_NAME-%Y-%m-%dT%H:%M:%S.pcap -W 1 -G 300 [must-gather ] OUT Using must-gather plug-in image: quay.io/openshift/origin-network-tools:latest When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information. ClusterID: 9bbb1bd6-5f5f-4fe8-adac-5683ed30d2b7 ClusterVersion: Stable at "4.10.0-0.nightly-2021-11-03-111400" ClusterOperators: All healthy and stable [must-gather ] OUT namespace/openshift-must-gather-lgpx7 created [must-gather ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-px4pc created [must-gather ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-px4pc deleted [must-gather ] OUT namespace/openshift-must-gather-lgpx7 deleted When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information. ClusterID: 9bbb1bd6-5f5f-4fe8-adac-5683ed30d2b7 ClusterVersion: Stable at "4.10.0-0.nightly-2021-11-03-111400" ClusterOperators: All healthy and stable Gathering data for ns/openshift-config... Gathering data for ns/openshift-config-managed... Gathering data for ns/openshift-authentication... ... ... * getting permissions error: [must-gather-ppdj2] POD 2021-11-04T16:46:40.434118256Z tcpdump: any: You don't have permission to capture on that device [must-gather-w8dnr] POD 2021-11-04T16:46:40.647571519Z tcpdump: 2021-11-04T16:46:40.647799869Z any: You don't have permission to capture on that device [must-gather-w8dnr] POD 2021-11-04T16:46:40.647799869Z (socket: Operation not permitted) [must-gather-ppdj2] POD 2021-11-04T16:46:40.434118256Z (socket: Operation not permitted) [must-gather-qfgmq] POD 2021-11-04T16:46:40.552959631Z tcpdump: any: You don't have permission to capture on that device [must-gather-qfgmq] POD 2021-11-04T16:46:40.552959631Z (socket: Operation not permitted) Filed a bug: https://bugzilla.redhat.com/show_bug.cgi?id=2020377 Verifying again: *ensured using the latest nightly and same oc version: $ /Users/memodi/Downloads/openshift-client-mac-4.10.0-0.nightly-2021-11-29-142540/oc version Client Version: 4.10.0-0.nightly-2021-11-29-142540 Server Version: 4.10.0-0.nightly-2021-11-29-142540 Kubernetes Version: v1.22.1+bac83a5 $ /Users/memodi/Downloads/openshift-client-mac-4.10.0-0.nightly-2021-11-29-142540/oc adm must-gather --dest-dir ./tmp --source-dir '/tmp/tcpdump/' --image quay.io/openshift/origin-network-tools:latest --node-selector 'kubernetes.io/os=linux,node-role.kubernetes.io/master' --host-network -- timeout 30 tcpdump -i any -w /tmp/tcpdump/\$POD_NAME-%Y-%m-%dT%H:%M:%S.pcap -W 1 -G 300 [must-gather ] OUT Using must-gather plug-in image: quay.io/openshift/origin-network-tools:latest When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information. ClusterID: fec50887-d741-4074-908c-bd3b2899874b ClusterVersion: Stable at "4.10.0-0.nightly-2021-11-29-142540" ClusterOperators: All healthy and stable [must-gather ] OUT namespace/openshift-must-gather-9mvxx created [must-gather ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-j8nvq created Warning: would violate "latest" version of "baseline" PodSecurity profile: non-default capabilities (container "gather" must not include "CAP_NET_RAW" in securityContext.capabilities.add), host namespaces (hostNetwork=true) [must-gather ] OUT pod: must-gather-b7xpf on node: ci-ln-42f4c5k-72292-vb6wh-master-0 for plug-in image quay.io/openshift/origin-network-tools:latest created [must-gather ] OUT pod: must-gather-v9szb on node: ci-ln-42f4c5k-72292-vb6wh-master-1 for plug-in image quay.io/openshift/origin-network-tools:latest created [must-gather ] OUT pod: must-gather-5vzb4 on node: ci-ln-42f4c5k-72292-vb6wh-master-2 for plug-in image quay.io/openshift/origin-network-tools:latest created [must-gather-b7xpf] POD 2021-11-29T21:55:24.225786948Z dropped privs to tcpdump [must-gather-b7xpf] POD 2021-11-29T21:55:24.225786948Z tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes [must-gather-5vzb4] POD 2021-11-29T21:55:24.434350275Z dropped privs to tcpdump [must-gather-5vzb4] POD 2021-11-29T21:55:24.434350275Z tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes [must-gather-v9szb] POD 2021-11-29T21:55:24.304723401Z dropped privs to tcpdump [must-gather-v9szb] POD 2021-11-29T21:55:24.304939226Z tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes [must-gather-b7xpf] POD 2021-11-29T21:55:54.204120594Z 104333 packets captured [must-gather-b7xpf] POD 2021-11-29T21:55:54.204120594Z 120112 packets received by filter [must-gather-b7xpf] POD 2021-11-29T21:55:54.204120594Z 0 packets dropped by kernel [must-gather-v9szb] POD 2021-11-29T21:55:54.281136846Z 145973 packets captured [must-gather-v9szb] POD 2021-11-29T21:55:54.281136846Z 164901 packets received by filter [must-gather-v9szb] POD 2021-11-29T21:55:54.281136846Z 0 packets dropped by kernel [must-gather-5vzb4] POD 2021-11-29T21:55:54.409213896Z 107746 packets captured [must-gather-5vzb4] POD 2021-11-29T21:55:54.409213896Z 118043 packets received by filter [must-gather-5vzb4] POD 2021-11-29T21:55:54.409213896Z 0 packets dropped by kernel [must-gather-b7xpf] OUT waiting for gather to complete [must-gather-b7xpf] OUT downloading gather output [must-gather-v9szb] OUT waiting for gather to complete [must-gather-v9szb] OUT downloading gather output [must-gather-5vzb4] POD 2021-11-29T21:55:54.409213896Z 107746 packets captured [must-gather-5vzb4] POD 2021-11-29T21:55:54.409213896Z 118043 packets received by filter [must-gather-5vzb4] POD 2021-11-29T21:55:54.409213896Z 0 packets dropped by kernel [must-gather-5vzb4] OUT waiting for gather to complete [must-gather-5vzb4] OUT downloading gather output [must-gather-b7xpf] OUT receiving file list ... done [must-gather-b7xpf] OUT ./ [must-gather-v9szb] OUT receiving file list ... done [must-gather-5vzb4] OUT receiving file list ... done [must-gather-b7xpf] OUT must-gather-b7xpf-2021-11-29T21:55:24.pcap [must-gather-5vzb4] OUT ./ [must-gather-5vzb4] OUT must-gather-5vzb4-2021-11-29T21:55:24.pcap [must-gather-v9szb] OUT ./ [must-gather-v9szb] OUT must-gather-v9szb-2021-11-29T21:55:24.pcap [must-gather-b7xpf] OUT [must-gather-b7xpf] OUT sent 44 bytes received 18108804 bytes 1168312.77 bytes/sec [must-gather-b7xpf] OUT total size is 36584889 speedup is 2.02 [must-gather-5vzb4] OUT [must-gather-5vzb4] OUT sent 44 bytes received 18772244 bytes 962681.44 bytes/sec [must-gather-5vzb4] OUT total size is 42296031 speedup is 2.25 [must-gather-v9szb] OUT [must-gather-v9szb] OUT sent 44 bytes received 25663740 bytes 1251891.90 bytes/sec [must-gather-v9szb] OUT total size is 50718069 speedup is 1.98 [must-gather ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-j8nvq deleted [must-gather ] OUT namespace/openshift-must-gather-9mvxx deleted When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information. ClusterID: fec50887-d741-4074-908c-bd3b2899874b ClusterVersion: Stable at "4.10.0-0.nightly-2021-11-29-142540" ClusterOperators: All healthy and stable memodi@memodi-mac:/Users/memodi $ find . -name "*.pcap" ./ci-ln-42f4c5k-72292-vb6wh-master-2/quay-io-openshift-origin-network-tools-sha256-9a5e9dbaf2eea3b677d4ad4597e7cf5c1127a1bf606b4b52959dfe4166ee9ac9/must-gather-5vzb4-2021-11-29T21:55:24.pcap ./ci-ln-42f4c5k-72292-vb6wh-master-1/quay-io-openshift-origin-network-tools-sha256-9a5e9dbaf2eea3b677d4ad4597e7cf5c1127a1bf606b4b52959dfe4166ee9ac9/must-gather-v9szb-2021-11-29T21:55:24.pcap ./ci-ln-42f4c5k-72292-vb6wh-master-0/quay-io-openshift-origin-network-tools-sha256-9a5e9dbaf2eea3b677d4ad4597e7cf5c1127a1bf606b4b52959dfe4166ee9ac9/must-gather-b7xpf-2021-11-29T21:55:24.pcap *collected pcap files from all 3 nodes: $ oc get nodes NAME STATUS ROLES AGE VERSION ci-ln-42f4c5k-72292-vb6wh-master-0 Ready master 151m v1.22.1+bac83a5 ci-ln-42f4c5k-72292-vb6wh-master-1 Ready master 151m v1.22.1+bac83a5 ci-ln-42f4c5k-72292-vb6wh-master-2 Ready master 151m v1.22.1+bac83a5 ci-ln-42f4c5k-72292-vb6wh-worker-a-79nrr Ready worker 140m v1.22.1+bac83a5 ci-ln-42f4c5k-72292-vb6wh-worker-b-d77w2 Ready worker 138m v1.22.1+bac83a5 ci-ln-42f4c5k-72292-vb6wh-worker-c-6b59h Ready worker 140m v1.22.1+bac83a5 *verified by loading pcap files by using tcpdump/wireshark utility.