decompose

The tool inspects running Docker containers and extracts all network connections, then exports the data in multiple formats such as Graphviz DOT, Structurizr DSL, Docker‑Compose YAML, PlantUML, JSON, CSV and plain pseudographical trees. It can also provide statistics on node counts, listen ports and outbound connections, and supports auto‑clustering based on graph topology.

It is aimed at developers and operators who need to visualize or audit large, undocumented Docker environments, especially when containers lack explicit compose files. The utility works on Linux, FreeBSD, macOS and Windows, offering a single static binary and a Docker image. When run as root on Linux it uses nsenter for full visibility, while non‑root or non‑Linux executions fall back to running netstat inside each container.

Distinctive aspects include support for Unix‑socket connections, a deep inspection mode that captures intra‑container process links, and sorted output that can be tracked in version control. The project reports high test coverage, fast scanning of hundreds of containers, and provides pre‑built binaries and packages for easy installation.