# Filebeat stops working with error message UDP Package size to large **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [July 8, 2021, 8:14am UTC](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151 "2021-07-08T08:14:22Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![rolandmueller](https://avatars.discourse-cdn.com/v4/letter/r/87869e/32.png) [@rolandmueller](https://discuss.elastic.co/u/rolandmueller)\ **Post date:** [July 8, 2021, 8:14am UTC](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151/1 "2021-07-08T08:14:22Z")
Hello As in the log files it's recommeded to report this I would like todo so. I have Filebeat installed (7.13.2) on Windows Server 2019 (1809). We have Air Watch Cloud Connector (19.12) configured for sending Syslog data to the local installed filebeat. It does work for some time, but then filebeat shows up with following error message, and stops sendig any data to elasticsearch: > 2021-07-07T18:55:06.233+0200 ERROR [udp] dgram/handler.go:77 Error reading from the socket read udp 127.0.0.1:9514: wsarecvfrom: A message sent on a datagram socket was larger than the internal message buffer or some other network limit, or the buffer used to receive a datagram into was smaller than the datagram itself. {"address": "localhost:9514"} > 2021-07-07T18:55:06.303+0200 ERROR [UDP] logp/logger.go:218 Panic handling datagram. Recovering, but please report this.{panic 25 0 runtime error: invalid memory address or nil pointer dereference} {stack 15 0 [github.com/elastic/beats/v7/libbeat/logp.(\*Logger).Recover](http://github.com/elastic/beats/v7/libbeat/logp.(*Logger).Recover) > /go/src/github.com/elastic/beats/libbeat/logp/logger.go:218 > runtime.gopanic > /usr/local/go/src/runtime/panic.go:969 > runtime.panicmem > /usr/local/go/src/runtime/panic.go:212 > runtime.sigpanic > /usr/local/go/src/runtime/signal\_windows.go:246 > [github.com/elastic/beats/v7/filebeat/input/udp.NewInput.func1](http://github.com/elastic/beats/v7/filebeat/input/udp.NewInput.func1) > /go/src/github.com/elastic/beats/filebeat/input/udp/input.go:77 > [github.com/elastic/beats/v7/filebeat/inputsource/common/dgram.DatagramReaderFactory.func1.1](http://github.com/elastic/beats/v7/filebeat/inputsource/common/dgram.DatagramReaderFactory.func1.1) > /go/src/github.com/elastic/beats/filebeat/inputsource/common/dgram/handler.go:82 > [github.com/elastic/beats/v7/filebeat/inputsource/common/dgram.(\*Listener).connectAndRun](http://github.com/elastic/beats/v7/filebeat/inputsource/common/dgram.(*Listener).connectAndRun) > /go/src/github.com/elastic/beats/filebeat/inputsource/common/dgram/server.go:122 > [github.com/elastic/beats/v7/filebeat/inputsource/common/dgram.(\*Listener).Start.func1](http://github.com/elastic/beats/v7/filebeat/inputsource/common/dgram.(*Listener).Start.func1) > /go/src/github.com/elastic/beats/filebeat/inputsource/common/dgram/server.go:112 > [github.com/elastic/go-concert/unison.(\*TaskGroup).Go.func1](http://github.com/elastic/go-concert/unison.(*TaskGroup).Go.func1) > /go/pkg/mod/github.com/elastic/go-concert@v0.1.0/unison/taskgroup.go:124 } Following is the configuration i did for the udp input: > filebeat.inputs: > > - type: udp > host: "localhost:9514" > processors: > > - type: tcp > host: "localhost:9514" > processors: Even if the sender send too large UDP packages, as it is written in the log filebeat should recover and send the following data? Kind Regards Roland ---
**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\ **Post date:** [July 9, 2021, 9:13am UTC](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151/2 "2021-07-09T09:13:28Z")
Could you please open Beats issue for this and post this panic? It looks like a problem with Beats. ---
**Author:** ![rolandmueller](https://avatars.discourse-cdn.com/v4/letter/r/87869e/32.png) [@rolandmueller](https://discuss.elastic.co/u/rolandmueller)\ **Post date:** [July 9, 2021, 11:21am UTC](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151/3 "2021-07-09T11:21:17Z")
Hello Marcin Yes of course I will do that. Thanks for your reply. Kind Regards Roland ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 6, 2021, 1:21pm UTC](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151/4 "2021-08-06T13:21:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.