Skip to main content
Profiles are configuration files containing pre-defined sets of command line arguments. They are meant to define reusable set of arguments to ease working with common cases.

Using profiles

Profiles can be used with the -p flag followed by the profile name:
retis -p <profile-name> collect
For example, to use the generic profile:
retis -p generic collect

Available profiles

Retis comes with several built-in profiles for common networking scenarios:

Generic

Wide set of probes across the networking stack with automatic collectors

Ifdump

Capture packets at device driver level, similar to AF_PACKET utilities

Dropmon

Monitor packet drops with stack traces

Nft-dropmon

Monitor netfilter drops with verdict information

When to use profiles

Profiles are ideal when:
  • You’re starting a new investigation and need a good baseline configuration
  • You want to quickly capture packets at specific points in the network stack
  • You need to monitor packet drops across the system
  • You want consistent, reproducible tracing configurations
Profiles can be combined with additional command-line arguments to customize behavior further.

Build docs developers (and LLMs) love