# Packetbeat create pcap file and ingest data

**URL:** <https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992>\
**Category:** Elasticsearch\
**Created:** [March 11, 2021, 6:57pm UTC](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992 "2021-03-11T18:57:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![andywt123](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andywt123/32/65160_2.png) [@andywt123](https://discuss.elastic.co/u/andywt123)\
**Post date:** [March 11, 2021, 6:57pm UTC](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992/1 "2021-03-11T18:57:20Z")

</div>

We have a requirement to create and store pcap files for all of our web server traffic. I wanted to find out if anyone has used packetbeat to create pcap files to be store and also ingest the data to be used in dashboards. Also if you have any concerns or gotchas

Thanks

---

<div class="post-metadata">

**Author:** ![ylasri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ylasri/32/86120_2.png) [@ylasri](https://discuss.elastic.co/u/ylasri)\
**Post date:** [March 11, 2021, 9:01pm UTC](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992/2 "2021-03-11T21:01:42Z")

</div>

Packetbeat will capture a certain type of packets and send them directly to ES  
If you want to capture full traffic in pcap and send them to ES, think about wireshark  
Check this post

> **[Analyzing network packets with Wireshark, Elasticsearch, and Kibana](https://www.elastic.co/blog/analyzing-network-packets-with-wireshark-elasticsearch-and-kibana)**
>
> Learn how to architect a real-time data pipeline for network packet analysis using Wireshark, Filebeat, Logstash, Ingest Pipelines, Elasticsearch, and Kibana.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 8, 2021, 9:02pm UTC](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992/3 "2021-04-08T21:02:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.