My use case in short: I want to run packetbeat on one of my servers and pipe the pcap directly into snort. How can this be done? Details: I want to use packetbeat to just capture packets as they are (I dont care much about it's ability to decode layer 7 etc for my use case) and send the packets w…

Can packetbeat send pcap to http end point?

steffens (Steffen Siering) July 17, 2017, 11:03pm 2

writing of pcap files in packetbeat is more for debugging purposes. Packetbeat does deep packet inspection and publishes it's results to logstash/elasticsearch.

Topic		Replies	Views
Packetbeat local usage without elastic search Beats	4	473	September 5, 2018
Packetbeat to analysi offline packet captures Beats	3	2906	April 17, 2017
PCAP data with Packetbeat Beats packetbeat	1	675	September 27, 2021
Packetbeat input from pcap -> all sniffed field on ELK Beats packetbeat	6	2244	October 4, 2018
Using Packetbeat and named pipes on Linux Beats packetbeat	2	582	July 17, 2019

Can packetbeat send pcap to http end point?

Related topics