Inspect live traffic and replay requests

The Traffic Inspector lets you view inbound requests in real time with searchable payloads, from both the CLI and the web dashboard. It is a paid feature, gated by the traffic_inspector entitlement.

Live tail from the CLI

# Live tail, search payloads, last 15 minutes, JSON output
ngris inspect --tunnel myapp --search "payment_intent" --since 15m --format json

# Filter by status codes
ngris inspect --tunnel myapp --status 4xx,5xx

# Stream to an external tool
ngris inspect --tunnel myapp --json | jq ".method, .path"

Filtering in the dashboard

The dashboard uses a condition builder where each condition combines a dimension, an operator, and a value. Dimensions include host, path, method, source_ip, status, protocol, asn, country, ua, browser, and os. Sensitive headers are redacted by default based on org policy.

Replay

Re-send captured requests to any environment, with overrides for debugging — useful for regression testing after fixing a bug.

# Replay a failing event to staging and override a header
ngris replay --id req_01HX... --to https://staging.example.com 
  --header "X-Debug: true" 
  --body "{"test": true}"

# Bulk replay from a file
ngris replay batch events.json --to https://dev.local:3000