# Qtap

Qtap is an eBPF agent that captures traffic flowing through the Linux kernel. By attaching to TLS/SSL functions, data is intercepted before and after encryption and then passed to flexible plugins with full visibility along with all of the available context - process/container/host/user/protocol/etc. Qtap makes it possible to understand what's happening with your egress traffic, without modifying apps, installing proxies, or managing certs.

Qtap shows you exactly what data is being sent and received in its original, unencrypted form while operating out-of-band with minimal overhead, without adding latency or disrupting application performance.

> **Note**: For cloud-managed deployments, see [Qplane Documentation](https://docs.qpoint.io/getting-started/qplane).

### Try Qtap in 60 Seconds

Want to give Qtap a test run? Spin up a temporary instance in Demo mode! See traffic in real time right in your terminal.

```bash
# Run Qtap in demo mode
curl -s https://get.qpoint.io/demo | sudo sh
```

<figure><img src="https://1396152757-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FcJHkFBso2iGNyqIxfv6K%2Fuploads%2Fgit-blob-1442e20c9fbf686b025e2681e37c0b8a7a62dffd%2Fqtap_demo.gif?alt=media" alt=""><figcaption></figcaption></figure>

Or install and start running right away:

```bash
# Install the Qtap agent
curl -s https://get.qpoint.io/install | sudo sh

# Run with defaults!
sudo qtap
```

### Key Features

* **Zero Configuration**: Works out of the box with sensible defaults
* **Process Attribution**: See exactly which apps are making connections
* **Pre-Encryption Visibility**: See data before TLS encryption
* **Minimal Overhead**: Lightweight eBPF implementation
* **Flexible Storage**: Send data to stdout, S3, or more

Start simple, scale as needed. Qtap provides immediate insights with no configuration required.

***

*For cloud-managed deployments with centralized configuration, see* [*Qplane Documentation*](https://docs.qpoint.io/getting-started/qplane)*.*


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.qpoint.io/getting-started/qtap.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.