You can sniff a packet, modify it, and re-send it using libtins. The only issue is dropping the original one so the receiver doesn't get two packets. This could be done via iptables rules, I'm sure there has to be some article describing how to do it.

Originally posted by @mfontanini in mfontanini/libtins#61 (comment)

It would be great to have a label to the ksniff pod so I can do filtering and whitelisting of resources in my k8s cluster.

For example, adding a label app=ksniff would be great so I can then identify the resource using

    labelSelector: 
      matchExpressions: 
      - {key: app, operator: NotIn, values: ["ksniff"]}

Current ksniff pod

$  (master) kubectl describe po

Currently there are several matching functions not implemented, ex: doc, xls, flac, [wav](https://github.com/gabriel-vasile/mimetype/blob/master/matcher

It would be great if information about the bit-width of the operating system could be included. Several of the providers give this information, so it shouldn't be too hard to do :)

In https://mimesniff.spec.whatwg.org/#parsing-a-mime-type the following step might be clearer if it explicitly said the trailing sequence after " was to be discarded. Might also be better if the example contains a ';' since the step mentions ';'

Current:

Collect a sequence of code points that are not U+003B (;) from input, given position.
Example: Given text/html;charset="shift_jis"iso-20