# Packetbeat logging traffic from Ip with different subnet
**URL:** https://discuss.elastic.co/t/packetbeat-logging-traffic-from-ip-with-different-subnet/267057
**Category:** Beats
**Tags:** packetbeat
**Created:** [March 12, 2021, 8:38am UTC](https://discuss.elastic.co/t/packetbeat-logging-traffic-from-ip-with-different-subnet/267057 "2021-03-12T08:38:30Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@ethical20](https://discuss.elastic.co/u/ethical20)
#### Post date: [March 12, 2021, 8:38am UTC](https://discuss.elastic.co/t/packetbeat-logging-traffic-from-ip-with-different-subnet/267057/1 "2021-03-12T08:38:30Z")
Hi,
I'm receiving logs from packetbeat from an IP with different subnet.
Like my ip is 192.168.0.100 on network card index 1 for example, and I'm getting logs from this Ip and 192.168.1.92 which has different subnet.
I can see this would happen if promiscuous mode is enabled, but it is disabled by default as I configured packetbeat.yml to get
```auto
packetbeat.interfaces.device: 1
```
by index (which is 1 in my case) and not (any).
How can I configure the yml to only get logs from the IP assigned on the network card and not other IPs from different subnets?
Any help is really appreciated cause this is causing a lot of log mess.
Regards,
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 9, 2021, 10:39am UTC](https://discuss.elastic.co/t/packetbeat-logging-traffic-from-ip-with-different-subnet/267057/2 "2021-04-09T10:39:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.