# Packetbeat Bytes in and out data issues

**URL:** <https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [June 16, 2016, 4:26am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945 "2016-06-16T04:26:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kennedy\_Kan1](https://avatars.discourse-cdn.com/v4/letter/k/cc9497/32.png) [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Post date:** [June 16, 2016, 4:26am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945/1 "2016-06-16T04:26:38Z")

</div>

I have read the documentation from packetbeat and realized that the packetbeat measure Bytes in and Bytes out data across application layer message. I would like to know does it measure all the layer or just a specific layer? Also, does it only measure the data between client and server or also between client and client? Thanks.

[https://www.elastic.co/guide/en/beats/packetbeat/current/exported-fields-measurements.html](https://www.elastic.co/guide/en/beats/packetbeat/current/exported-fields-measurements.html)

---

<div class="post-metadata">

**Author:** ![talk2cshah](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\
**Post date:** [June 16, 2016, 9:10am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945/2 "2016-06-16T09:10:48Z")

</div>

it monitors Request Size and Response size for every incoming request.. what do you mean by Client and client?

Regards,

---

<div class="post-metadata">

**Author:** ![Kennedy\_Kan1](https://avatars.discourse-cdn.com/v4/letter/k/cc9497/32.png) [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Post date:** [June 16, 2016, 10:07am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945/3 "2016-06-16T10:07:28Z")

</div>

I mean like between client servers, for example, a ELK server is setup to read logs from 2 client servers, will packetbeat also measure the data between incoming requests of the 2 servers or just between ELK and each client

---

<div class="post-metadata">

**Author:** ![talk2cshah](https://avatars.discourse-cdn.com/v4/letter/t/8e7dd6/32.png) [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\
**Post date:** [June 16, 2016, 10:10am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945/4 "2016-06-16T10:10:54Z")

</div>

Packetbeat will need to be deployed on machines which host the web application. Configure it correctly in terms of ports.  
Packetbeat will further collect http specific information and push to Central Elastic store.

Packetbeat measure data of incoming request on the webserver and out going response from the webserver.

Regards,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 7, 2016, 4:26am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945/5 "2016-07-07T04:26:49Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.