# Mysql data not seen in packetbeats

**URL:** <https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [July 26, 2016, 4:48am UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350 "2016-07-26T04:48:53Z")\
**Posts on this page:** 5\
**Page:** 2

<div class="post-metadata">

**Author:** ![shaikmuzakkir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaikmuzakkir/32/114202_2.png) [@shaikmuzakkir](https://discuss.elastic.co/u/shaikmuzakkir)\
**Post date:** [August 2, 2016, 11:05am UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350/21 "2016-08-02T11:05:52Z")

</div>

Thanks for the information. I see that the mysql version has it specified that it uses TLS. Looks like the latest versions of Mysql are having TLS enabled by default unlike the older versions. Do you know if it is possible to disable the TLS encryption on mysql 5.7.13?

mysql\> SHOW VARIABLES LIKE "%version%";  
+-------------------------+------------------------------+  
| Variable\_name | Value |  
+-------------------------+------------------------------+  
| innodb\_version | 5.7.13 |  
| protocol\_version | 10 |  
| slave\_type\_conversions | |  
| tls\_version | TLSv1,TLSv1.1 |  
| version | 5.7.13 |  
| version\_comment | MySQL Community Server (GPL) |  
| version\_compile\_machine | x86\_64 |  
| version\_compile\_os | Linux |  
+-------------------------+------------------------------+  
8 rows in set (0.22 sec)

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [August 2, 2016, 11:53am UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350/22 "2016-08-02T11:53:21Z")

</div>

see [mysql cli options docs](http://dev.mysql.com/doc/refman/5.7/en/secure-connection-options.html). While server provides TLS support, the client has to choose whether to use encryption (which is the case by default).

Also check [`require_secure_transport` system variable](http://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_require_secure_transport).

Seems like TLS can not be disabled on server side, but client side only.

---

<div class="post-metadata">

**Author:** ![shaikmuzakkir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaikmuzakkir/32/114202_2.png) [@shaikmuzakkir](https://discuss.elastic.co/u/shaikmuzakkir)\
**Post date:** [August 8, 2016, 5:48am UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350/23 "2016-08-08T05:48:46Z")

</div>

Hi Steffens,

I see that the variable require\_secure\_transport is set to OFF by default.

[root@ip-10-39-196-70 conf]# mysql -u pd\_integration -p  
Enter password:  
Welcome to the MySQL monitor. Commands end with ; or \g.  
Your MySQL connection id is 9201  
Server version: 5.7.13 MySQL Community Server (GPL)

Copyright (c) 2000, 2016, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its  
affiliates. Other names may be trademarks of their respective  
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql\> show variables like '%secure%';  
+--------------------------+-----------------------+  
| Variable\_name | Value |  
+--------------------------+-----------------------+  
| require\_secure\_transport | OFF |  
| secure\_auth | ON |  
| secure\_file\_priv | /var/lib/mysql-files/ |  
+--------------------------+-----------------------+  
3 rows in set (0.01 sec)

mysql\>

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [August 8, 2016, 12:18pm UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350/24 "2016-08-08T12:18:24Z")

</div>

Unfortunately I haven't found an option in mysql server to disable SSL support. I only found [this bug report](https://bugs.mysql.com/bug.php?id=79825).

So, it's up to the client to disable tls. For example use `--skip-ssl` when running CLI mysql client like:

```auto
$ mysql --skip-ssl --protocol=TCP -u pd_integration -p

```

Starting mysql client like this, you should be able to monitor commands with packetbeat or tcpdump. E.g. try `SELECT 1;`.

If and how you can disable SSL depends on clients/libs in use.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 16, 2016, 4:49am UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350/25 "2016-08-16T04:49:02Z")

</div>

Closed on August 16, 2016, 4:49am UTC

This topic was automatically closed after 21 days. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350.md?page=1)
