This Helm chart to collect tcpdump from linux node/s and save it throw azure file share, by default will create Daemonset and will keep running, for more option please check the Values.

helm repo add tcpdump https://amjadaljunaidi.github.io/tcpdump/
helm repo update
helm install tcpdump tcpdump/tcpdump

To use your own custom tcpdump image pass --set customImage.enabled=true --set customImage.image=<your image> to the helm install command.

make sure to keep the pvc before deleting the chart

kubectl patch pv <pv_name>  -p "{\"spec\":{\"persistentVolumeReclaimPolicy\":\"Retain\"}}"
helm uninstall tcpdump