- Home
- eBPF Observability Tools
- Mermin
On the recordRead 8 Oct 202622 facts
Mermin
On the record
- Bare metal
- Mermin can run as a privileged container on bare metal.github.com · read 8 Oct 2026
- Code changes
- Mermin captures traffic without application changes, sidecars, or a service mesh.docs.mermin.dev · read 8 Oct 2026
- Data detail
- Mermin aggregates packets into bidirectional flows with connection state tracking and does not capture packet payloads.docs.mermin.dev · read 8 Oct 2026
- Deployment
- Mermin runs as a Kubernetes DaemonSet with one pod per node, or as a privileged container on bare metal.docs.mermin.dev · read 8 Oct 2026
- Export and integrations
- Mermin exports through OTLP to observability backends including Elastic, Grafana Tempo, and Jaeger.github.com · read 8 Oct 2026
- Filtering
- Mermin supports configurable fine-grained filters to control which flows are captured and exported.docs.mermin.dev · read 8 Oct 2026
- Integrations
- Its native OTLP output can send Flow Traces to observability platforms such as Tempo, Jaeger, and Elastic.docs.mermin.dev · read 8 Oct 2026
- Kubernetes enrichment
- Flows can include Kubernetes Pod, Service, Deployment, and label metadata.docs.mermin.dev · read 8 Oct 2026
- Layer coverage
- The documentation describes Mermin as providing L3/L4 visibility, not L7 visibility.docs.mermin.dev · read 8 Oct 2026
- License
- Mermin is Apache 2.0 licensed except for its eBPF code, which is GPL-2.0 licensed.github.com · read 8 Oct 2026
- Licensing
- The repository says Mermin is distributed under Apache License 2.0 except for eBPF code, which is under GNU GPL version 2.github.com · read 8 Oct 2026
- Maker
- ElastiFlow says its project was created by Rob Cowart, who started it on GitHub in May 2017.elastiflow.com · read 8 Oct 2026
- Maker history
- ElastiFlow’s About page says founder Rob Cowart started the GitHub project in May 2017.elastiflow.com · read 8 Oct 2026
- Metadata
- Flows can include Kubernetes Pod, Service, Deployment, and label metadata.docs.mermin.dev · read 8 Oct 2026
- Network layer limit
- Mermin provides L3/L4 visibility rather than L7 visibility.docs.mermin.dev · read 8 Oct 2026
- No application changes
- Mermin captures traffic without sidecars, application modifications, or a service mesh.docs.mermin.dev · read 8 Oct 2026
- Privileges
- Mermin requires privileged mode to load eBPF programs and access network interfaces.docs.mermin.dev · read 8 Oct 2026
- Protocols
- Mermin supports TCP, UDP, and ICMP traffic and lists VXLAN, Geneve, and WireGuard as common tunneling protocols.docs.mermin.dev · read 8 Oct 2026
