This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Dashboard in Kibana is breaking up data fields incorrectly Packetbeat can’t capture traffic from Windows loopback interface »
Elastic Docs ›Packetbeat Reference [8.x] ›Troubleshoot ›Common problems

Packetbeat doesn’t see any packets when using mirror ports

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Packetbeat doesn’t see any packets when using mirror ports

edit

The interface needs to be set to promiscuous mode. Run the following command:

ip link set <device_name> promisc on

For example: ip link set enp5s0f1 promisc on

« Dashboard in Kibana is breaking up data fields incorrectly Packetbeat can’t capture traffic from Windows loopback interface »