IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Capture ICMP traffic

edit

The icmp section of the packetbeat.yml config file specifies options for the ICMP protocol. Here is a sample configuration section for ICMP:

packetbeat.protocols:

- type: icmp
  enabled: true

Configuration options

edit

Also see Common protocol options.

enabled

edit

The ICMP protocol can be enabled/disabled via this option. The default is true.

If enabled Packetbeat will generate the following BPF filter: "icmp or icmp6".