# ElasticClient (Network traffic)

**URL:** <https://discuss.elastic.co/t/elasticclient-network-traffic/372953>\
**Category:** Elastic Observability\
**Created:** [January 8, 2025, 6:16pm UTC](https://discuss.elastic.co/t/elasticclient-network-traffic/372953 "2025-01-08T18:16:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yechezkal\_Gutfreund](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yechezkal_gutfreund/32/140364_2.png) [@Yechezkal\_Gutfreund](https://discuss.elastic.co/u/Yechezkal_Gutfreund)\
**Post date:** [January 8, 2025, 6:16pm UTC](https://discuss.elastic.co/t/elasticclient-network-traffic/372953/1 "2025-01-08T18:16:53Z")

</div>

Can the Windows Elastic Client capture Network traffic (IP and Domain destination, response time, ports, protocol, codes, bytes, etc) by APPLICATION?

Currently I have the systems, and windows and apm integrations, but I am not seeing this data.

One thing I am not allowed to do on the computers on our network is modify the web pages or code for the applications, so we want passive, non-intrusive monitoring of the applications.

---

<div class="post-metadata">

**Author:** ![thiagodsrodrigues](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiagodsrodrigues/32/133778_2.png) [@thiagodsrodrigues](https://discuss.elastic.co/u/thiagodsrodrigues)\
**Post date:** [January 13, 2025, 3:43pm UTC](https://discuss.elastic.co/t/elasticclient-network-traffic/372953/2 "2025-01-13T15:43:41Z")

</div>

Através do uso do Packetbeat, pode capturar tráfego de rede de forma passiva e não intrusiva. O Packetbeat é um agente leve que monitora o tráfego de rede e pode coletar informações como:

IP de origem e destino  
Portas utilizadas  
Protocolos  
Códigos de resposta  
Bytes transferidos  
Tempos de resposta

Esses dados são capturados sem a necessidade de modificar o código dos aplicativos ou páginas da web, o que se alinha com a sua necessidade de um monitoramento passivo.

Como funciona o Packetbeat

1. O Packetbeat analisa pacotes de rede em tempo real e envia as informações para o Elasticsearch ou Logstash para processamento adicional.
2. Ele suporta vários protocolos, incluindo HTTP, DNS, MySQL, entre outros, permitindo uma análise detalhada do desempenho e da latência das aplicações.
3. Os dados coletados podem ser visualizados no Kibana, facilitando a análise e a criação de dashboards personalizados.

---

<div class="post-metadata">

**Author:** ![Yechezkal\_Gutfreund](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yechezkal_gutfreund/32/140364_2.png) [@Yechezkal\_Gutfreund](https://discuss.elastic.co/u/Yechezkal_Gutfreund)\
**Post date:** [January 13, 2025, 4:11pm UTC](https://discuss.elastic.co/t/elasticclient-network-traffic/372953/3 "2025-01-13T16:11:16Z")

</div>

I put BY APPLICATION in capitals, because I know that the ElasticClient ( and packet beat) collect those stats, but we need to know what a particular APPLICATION (e.g. thick outlook client) is doing in the way of its network traffic, and best by what network protocols, response, domains and protocols are for all traces coming from a SEND, CALENDAR lookup, Receive Mail, etc.).