I ran into a weird case that packetbeat not working when i specify using af_packet, after starting seems noting is runing, no cpu consumption, no logs generated, just hung in there, and cannot be stopped using CtrlC
but everything worked fine if i just change sniffer type to pcap
i'm monitoring on a pretty busy interface which is 10g bandwidth, thoughtput 1g data per second
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.