How do we differentiate inbound and outbound traffic in packetbeat

Elastic Stack Beats
1

How do we differentiate inbound and outbound traffic in packetbeat ?

or how do we can find out connection to server and connection from server ?

2

There is a direction field added by some of the protocol modules (e.g. http, dns).

For flows there isn't any indicator for which side of the flow initiated the connection.

3

thanks for help

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.