大象鲨，一个监控Postgres网络流量的工具

大象鲨，一个监控Postgres网络流量的工具
Elephantshark, a tool to monitor Postgres network traffic

原始链接: https://neon.com/blog/elephantshark-monitor-postgres-network-traffic

## 大象鲨：Postgres网络流量故障排除大象鲨是由Neon开发的开源Ruby脚本，用于监控和故障排除Postgres网络流量——包括服务器、客户端、驱动程序和ORM。它通过拦截和记录Postgres协议交换、解密SSL/TLS加密连接以及提供详细的消息分析来工作。与难以处理加密流量的Wireshark不同，大象鲨会解密和重新加密连接，或者可以将密钥写入SSLKEYLOGFILE以便*与*Wireshark一起使用。这允许全面检查进出Postgres数据库的数据流，即使是使用SSL的数据库。要使用大象鲨，您在一个终端中运行它，并在另一个终端中连接到您的Postgres数据库（例如Neon），并按照说明修改主机名和SSL设置。然后，该工具会记录交换的字节，提供关于连接建立、身份验证、查询和响应的见解。对于需要深入了解Postgres通信的开发人员和数据库管理员来说，它是一个有价值的工具。更多信息和安装说明请访问其GitHub页面：[https://github.com/neondatabase-labs/elephantshark](https://github.com/neondatabase-labs/elephantshark)

Hacker News 新闻 | 过去 | 评论 | 提问 | 展示 | 招聘 | 提交登录 Elephantshark，一个监控Postgres网络流量的工具 (neon.com) 38点由 gmac 23小时前 | 隐藏 | 过去 | 收藏 | 2评论 alhirzel 16小时前 [–] 好名字！回复 gmac 15小时前 | 父评论 [–] 谢谢。:) 我是楼主。Elephantshark建立在一些我用了一段时间的简单的Postgres代理Ruby脚本之上。回复指南 | 常见问题 | 列表 | API | 安全 | 法律 | 申请YC | 联系搜索：

原文

Elephantshark helps you monitor, understand and troubleshoot Postgres network traffic: that’s Postgres servers, clients, drivers and ORMs talking to Postgres servers, proxies and poolers.

Elephantshark sits between the two parties in a Postgres-protocol exchange, forwarding messages in both directions while parsing and logging them. It is an open-source Ruby script published by Neon and works with any and all Postgres-protocol network traffic. That includes, but isn’t limited to, traffic to and from Neon databases.

https://github.com/neondatabase-labs/elephantshark

Ordinarily Wireshark is great for this kind of thing, but using Wireshark is difficult if a connection is SSL/TLS-encrypted. SSLKEYLOGFILE support was recently merged into libpq, but it won’t be available in a release version for some time. Plus, not all Postgres connections are made with libpq.

To get round this problem, Elephantshark decrypts and re-encrypts a Postgres connection. It then logs and annotates the messages passing through. Or if you prefer to use Wireshark, Elephantshark can enable that too by writing keys to an SSLKEYLOGFILE.

Run elephantshark in one terminal:

% elephantshark
listening ...

In a second terminal, connect to and query a Neon Postgres database via Elephantshark by (1) appending .local.neon.build to the host name and (2) changing channel_binding=require to channel_binding=disable:

% psql 'postgresql://neondb_owner:fake_password@ep-crimson-sound-a8nnh11s.eastus2.azure.neon.tech.local.neon.build/neondb?sslmode=require&channel_binding=disable'
psql (17.5 (Homebrew))
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compression: off, ALPN: postgresql)
Type "help" for help.

neondb=> SELECT now();
              now              
-------------------------------
 2025-07-02 11:51:01.721628+00
(1 row)

neondb=> \q

Back in the first terminal, see what bytes got exchanged:

To find out more and/or to install Elephantshark, check out the README on GitHub. You can also find out more about Neon, or sign up today for free.

大象鲨，一个监控Postgres网络流量的工具 Elephantshark, a tool to monitor Postgres network traffic

大象鲨，一个监控Postgres网络流量的工具
Elephantshark, a tool to monitor Postgres network traffic