Using profiles
Profiles can be used with the-p flag followed by the profile name:
Available profiles
Retis comes with several built-in profiles for common networking scenarios:Generic
Wide set of probes across the networking stack with automatic collectors
Ifdump
Capture packets at device driver level, similar to AF_PACKET utilities
Dropmon
Monitor packet drops with stack traces
Nft-dropmon
Monitor netfilter drops with verdict information
When to use profiles
Profiles are ideal when:- You’re starting a new investigation and need a good baseline configuration
- You want to quickly capture packets at specific points in the network stack
- You need to monitor packet drops across the system
- You want consistent, reproducible tracing configurations
Profiles can be combined with additional command-line arguments to customize behavior further.
