I was trying to use Packetbeat to monitor network traffic of a FTP server. in a specific way, I was trying to log all the attempted connections on local port 21 and 22.
Just to start I've enabled http protocol on port 21-22 with this code:
packetbeat.protocols.http: ports: [21, 22]
but I'm getting event from a lot of local ports.