# Debug Unmatched responses

**URL:** <https://discuss.elastic.co/t/debug-unmatched-responses/119862>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [February 14, 2018, 6:27pm UTC](https://discuss.elastic.co/t/debug-unmatched-responses/119862 "2018-02-14T18:27:03Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 14, 2018, 6:36pm UTC](https://discuss.elastic.co/t/debug-unmatched-responses/119862/2 "2018-02-14T18:36:04Z")

</div>

You'll probably need to due some tuning if you are on the defaults. In particular switch away from using pcap to af\_packet. See [https://www.elastic.co/guide/en/beats/packetbeat/6.2/configuration-interfaces.html](https://www.elastic.co/guide/en/beats/packetbeat/6.2/configuration-interfaces.html)

There was some good discussion in this ticket and the linked and the ticket it links to: [Performance of Packetbeat?](https://discuss.elastic.co/t/performance-of-packetbeat/116022)

---

_[View the full topic](https://discuss.elastic.co/t/debug-unmatched-responses/119862)._