# Filebeat + cisco module - listening on other than localhost

**URL:** <https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-other-than-localhost/212944>\
**Category:** Beats\
**Tags:** beats-module, filebeat\
**Created:** [December 24, 2019, 11:13am UTC](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-other-than-localhost/212944 "2019-12-24T11:13:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![coltrane35](https://avatars.discourse-cdn.com/v4/letter/c/c37758/32.png) [@coltrane35](https://discuss.elastic.co/u/coltrane35)\
**Post date:** [December 24, 2019, 11:13am UTC](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-other-than-localhost/212944/1 "2019-12-24T11:13:21Z")

</div>

Hello,  
i have installed filebeat and enable cisco module  
Cico module default configuration make filebeat listenning on localhost 127.0.0.1  
I want it to listen on all interfaces 0.0.0.0.  
Below is what is written in cisco.yml ,

```auto
 # The interface to listen to UDP based syslog traffic. Defaults to
 # localhost. Set to 0.0.0.0 to bind to all available interfaces.
 # var.syslog_host: localhost

```

so i just change like this and remove #

var.syslog\_host: 0.0.0.0

Then i stop/start filebeat

then flebeat listen only on ipv6 not on ipv4  
udp 0 0 127.0.0.1:9002 0.0.0.0:\* 32409/filebeat  
udp6 0 0 :::9001 :::\* 32409/filebeat  
udp6 0 0 :::9003 :::\* 32409/filebeat

how can i make filebeat listen on ipv4 ?

---

<div class="post-metadata">

**Author:** ![jbaucom](https://avatars.discourse-cdn.com/v4/letter/j/d9b06d/32.png) [@jbaucom](https://discuss.elastic.co/u/jbaucom)\
**Post date:** [January 20, 2020, 9:50pm UTC](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-other-than-localhost/212944/2 "2020-01-20T21:50:28Z")

</div>

Did you resolve this issue? I seem to be having the same problem.

---

<div class="post-metadata">

**Author:** ![coltrane35](https://avatars.discourse-cdn.com/v4/letter/c/c37758/32.png) [@coltrane35](https://discuss.elastic.co/u/coltrane35)\
**Post date:** [January 20, 2020, 10:18pm UTC](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-other-than-localhost/212944/3 "2020-01-20T22:18:57Z")

</div>

Yes i have resolved. When listen on udp6 it also reply on udp IPV4. It is magic !  
No seriously, i have read an article which explain that when listen on ipv6 but receiving an ipv4 , the server has a mechanisme that encapsulate the request in IPV6. And can reply in IPv4.  
It is not only for filebeat but for many application.  
So on my side it works fine

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 17, 2020, 10:19pm UTC](https://discuss.elastic.co/t/filebeat-cisco-module-listening-on-other-than-localhost/212944/4 "2020-02-17T22:19:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.