Packetbeat is very useful to sniff and send data to logstash, so i started to use it. But now, i have a problem:
I want to get the raw data (in heaxdecimal, like in wireshark) when packetbeat cannot recognize the packet's protocol.
Is it possible with packetbeat ? Must i use an other software (like wireshark) ?
Here my current configuration file (packetbeat.yml):
packetbeat.interfaces.device: any packetbeat.flows: timeout: 30s period: 10s packetbeat.protocols.dns: ports:  include_authorities: true include_additionals: true packetbeat.protocols.http: ports: [80, 443, 8080, 8081] send_response: true include_body_for: ["text/html"] packetbeat.protocols.icmp: send_response: true send_request: true enabled: true output.logstash: hosts: ['localhost:5000']