CODEWITHSUNDEEP
elasticsearchpacketbeat
Celestine Timmy
Celestine Timmy

Reputation: 55

Packetbeat can't analyze ICMP packets sent

I am trying to index ICMP packets into elasticseach using Packetbeat. I do know that the current Packetbeat infrastructure just provides support for TCP & UDP plugins, so starting at the transport layer. ICMP is one layer below (network layer) but is there any way in which I could get these data to be indexed.

I tried adding this to packetbeat.yml:

icmp.enabled: true

Upvotes: 0

Views: 235

Answers (1)

Val
Val

Reputation: 217514

This is not implemented yet, but an issue has been filed, is still open but is being worked on.

If you don't feel like waiting and want to develop your own extension, you may do so by adding a new protocol yourself.

Upvotes: 1

Related Questions