1.过滤出容器的PID docker inspect 容器id |grep Pid 2. nsenter -t $Pid -n /bin/sh tcpdump -i any -nn port 17575