# Packetbeat not capturing anything when \`packetbeat.flows: enabled: false\`

**URL:** <https://discuss.elastic.co/t/packetbeat-not-capturing-anything-when-packetbeat-flows-enabled-false/202909>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [October 9, 2019, 8:54pm UTC](https://discuss.elastic.co/t/packetbeat-not-capturing-anything-when-packetbeat-flows-enabled-false/202909 "2019-10-09T20:54:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shreyapatel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shreyapatel/32/55638_2.png) [@shreyapatel](https://discuss.elastic.co/u/shreyapatel)\
**Post date:** [October 9, 2019, 8:54pm UTC](https://discuss.elastic.co/t/packetbeat-not-capturing-anything-when-packetbeat-flows-enabled-false/202909/1 "2019-10-09T20:54:05Z")

</div>

I am using Packetbeat v5.6.16 and want to monitor the data in P4 packets captured.

1. Enabling `packetbeat.flows` does not capture the individual packet data; only header information in bulk is captured.
2. Disabling `packetbeat.flows` does not capture anything.  
The logs do not show any errors. Please guide me on how should I proceed to resolve this. Thanks!

`packetbeat.yml`

```auto
packetbeat.interfaces.device: ens1f0
packetbeat.interfaces.type: af_packet
packetbeat.interfaces.buffer_size_mb: 100
packetbeat.interfaces.snaplen: 65535

packetbeat.flows:
  enabled: false
  timeout: 30s
  period: 10s
packetbeat.protocols.dns:
  enabled: true
  ports: [53, 123]
  send_request: true
  send_response: true
  include_authorities: true
  include_additionals: true
output.file:
  path: "/etc/packetbeat"
  filename: packetbeat_capture

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 6, 2019, 8:54pm UTC](https://discuss.elastic.co/t/packetbeat-not-capturing-anything-when-packetbeat-flows-enabled-false/202909/2 "2019-11-06T20:54:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.