# Auditbeat won't start on deb 8\_11 **URL:** \ **Category:** Beats\ **Tags:** auditbeat\ **Created:** [December 5, 2019, 12:45pm UTC](https://discuss.elastic.co/t/auditbeat-wont-start-on-deb-8-11/210712 "2019-12-05T12:45:41Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![ethrbunny](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ethrbunny/32/34603_2.png) [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Post date:** [December 5, 2019, 12:45pm UTC](https://discuss.elastic.co/t/auditbeat-wont-start-on-deb-8-11/210712/1 "2019-12-05T12:45:41Z")
Attempts to start auditbeat on this system give these errors: > instance/beat.go:916 Exiting: 1 error: 1 error: system/socket dataset setup failed: unable to guess one or more required parameters: guess\_sk\_buff\_proto failed: timeout while waiting for trigger to complete Suggestions on how to get around this? ``` # apt list --installed | grep beat auditbeat/stable,now 7.5.0 amd64 [installed] ``` ---
**Author:** ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)\ **Post date:** [December 12, 2019, 9:59am UTC](https://discuss.elastic.co/t/auditbeat-wont-start-on-deb-8-11/210712/2 "2019-12-12T09:59:44Z")
Can you share the output of running auditbeat in debug mode? `auditbeat run -e -d '*'`. Also, does setting `socket.enable_ipv6: false` make it work? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 2, 2020, 9:59am UTC](https://discuss.elastic.co/t/auditbeat-wont-start-on-deb-8-11/210712/3 "2020-01-02T09:59:51Z")
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.