Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/pythops/oryx/llms.txt

Use this file to discover all available pages before exploring further.

Oryx lets you narrow captured traffic by protocol layer and direction. Filters can be set at startup via CLI flags, or changed interactively while the app is running. The active filters are displayed in the settings bar at the top of the interface.

Filter types

Oryx organises filters into three protocol layers plus a direction filter.
Filter typeOptions
TransportTCP, UDP, SCTP
NetworkIPv4, IPv6, ICMPv4, ICMPv6, IGMP
LinkARP
DirectionIngress, Egress
Selecting all options within a layer is equivalent to no filter — all matching traffic passes through.

Opening the filter panel

Press f while in any section to open the filter panel. The panel displays all filter categories. Use j / k or the arrow keys to move between entries, and Space to select or deselect individual options.
1

Open the filter panel

Press f. The filter panel overlays the current section.
2

Navigate and toggle options

Use j / Down and k / Up to highlight an option. Press Space to toggle it on or off.
3

Apply the filters

Press f again (or Enter) to apply the selected filters. Press Esc to discard changes.
Applying new filters restarts the eBPF capture hooks for the affected directions. There may be a brief pause between disabling old hooks and enabling new ones.

Fuzzy search in Inspection

Within the Inspection section you can further narrow the visible packet list using fuzzy search without affecting the underlying capture filters.
  1. Press / to enter fuzzy search mode.
  2. Type any part of an address, port, or protocol name.
  3. The packet list filters in real time as you type.
  4. Press Esc to exit search mode and restore the full list.

CLI flags vs. interactive filters

Filters set via CLI flags (for example --transport tcp,udp) are applied immediately when Oryx starts and pre-populate the filter panel. You can change them at any time using the interactive filter panel without restarting the app. See CLI flags and startup options for the full flag reference.

Build docs developers (and LLMs) love