Netis cloud-probe is a production-grade network packet capture and forwarding system designed for cloud and virtualized environments where traditional TAP/SPAN port mirroring is unavailable. It consists of three main components: cpworker (C), a high-performance packet capture engine that reads packets via libpcap or DPDK, applies BPF filters, classifies traffic direction, and forwards encapsulated packets over GRE, VXLAN, ZMQ, or to file outputs; cpdaemon (Go), a management daemon that supervises cpworker instances, syncs configuration from a central Cloud Probe Manager (CPM), enforces resource limits via cgroups, and handles live config reload without packet loss; and cpctl (Go), a CLI tool for querying worker stats, ping, and info over a Unix domain socket. The system supports container and KVM environments with tools like dockerpid and cripid to resolve container host PIDs for per-container capture. It features a lock-free pipeline execution model, token bucket rate limiting, and a documented wire format for interoperability.