How do we differentiate inbound and outbound traffic in packetbeat


(Varun) #1

How do we differentiate inbound and outbound traffic in packetbeat ?

or how do we can find out connection to server and connection from server ?


(Andrew Kroh) #2

There is a direction field added by some of the protocol modules (e.g. http, dns).

For flows there isn't any indicator for which side of the flow initiated the connection.


(Varun) #3

thanks for help


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.