WARNING: Version 1.1 of Packetbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Why is the dashboard in Kibana breaking up my data fields incorrectly? Why is Packetbeat missing long running transactions? »
Elastic Docs ›Packetbeat Reference [1.1] ›Troubleshooting ›Frequently Asked Questions

Why doesn’t Packetbeat see any packets when using mirror ports?

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Why doesn’t Packetbeat see any packets when using mirror ports?

edit

The interface needs to be set to promiscuous mode. Run the following command:

ip link set <device_name> promisc on

For example: ip link set enp5s0f1 promisc on

« Why is the dashboard in Kibana breaking up my data fields incorrectly? Why is Packetbeat missing long running transactions? »