# Packetbeat on MIPS **URL:** \ **Category:** Beats\ **Tags:** packetbeat\ **Created:** [November 23, 2016, 2:52pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997 "2016-11-23T14:52:29Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![tetsuto](https://avatars.discourse-cdn.com/v4/letter/t/5f9b8f/32.png) [@tetsuto](https://discuss.elastic.co/u/tetsuto)\ **Post date:** [November 23, 2016, 2:52pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/1 "2016-11-23T14:52:29Z")
Hi, I'm trying to get Packetbeat up and running on a MIPS device (and open-wrt router). Just wondering if anyone had managed to cross compile to mips before? It would seem that go does crosscompile to MIPs as does libpcap Any ideas/directions would be most appreciated ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [November 23, 2016, 3:10pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/2 "2016-11-23T15:10:04Z")
I haven't done it for MIPS. But it should be possible if you have a MIPS cross-compiler. We cross-compile our releases of Packetbeat. We have a docker container with the cross-compilers installed, cross-compiled dependencies, and then we run `go build` with the appropriate environment variables set. All of this code is in the beats repo under dev-tools/packer. Whether or not you adapt our container to do you build, you will probably find the commands we run useful. See [https://github.com/elastic/beats/blob/master/dev-tools/packer/docker/xgo-image/base/build.sh](https://github.com/elastic/beats/blob/master/dev-tools/packer/docker/xgo-image/base/build.sh) ---
**Author:** ![tetsuto](https://avatars.discourse-cdn.com/v4/letter/t/5f9b8f/32.png) [@tetsuto](https://discuss.elastic.co/u/tetsuto)\ **Post date:** [November 23, 2016, 5:25pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/3 "2016-11-23T17:25:34Z")
Thanks - will take a look. Currently having a few issues getting a cross compile stack running properly. Having packetbeat able to run on openwrt router would seem extremely useful to me (and I'm guessing others) - I'll come back if I manage it ---
**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\ **Post date:** [November 24, 2016, 12:01am UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/4 "2016-11-24T00:01:30Z")
While I agree it would be cool to have packetbeat run on MIPS platform, one has to consider analysing packets can be quite expensive. An alternative solution might include the router forwarding packets to some external machine doing the processing. Also MIPS support in current go compiler is not yet well optimized. ---
**Author:** ![tetsuto](https://avatars.discourse-cdn.com/v4/letter/t/5f9b8f/32.png) [@tetsuto](https://discuss.elastic.co/u/tetsuto)\ **Post date:** [November 24, 2016, 11:20am UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/5 "2016-11-24T11:20:18Z")
With packetbeat would it be analysing the packets themselves? I thought it not just sniff the various flows and forward (up to a certain flow size) - then do the analysis on the remote ELK host. I can already tcpdump on an Edgerouter Lite quite happily - [https://help.ubnt.com/hc/en-us/articles/204962304-EdgeMAX-Capture-packets-on-the-router](https://help.ubnt.com/hc/en-us/articles/204962304-EdgeMAX-Capture-packets-on-the-router) ---
**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\ **Post date:** [November 28, 2016, 3:20pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/6 "2016-11-28T15:20:03Z")
packetbeat 5.0 can summaries flows and collect transactions by parsing the application layer directly. No raw packets are forwarded to Elasticsearch. The analysis is not done somewhere remote, but by packetbeat itself. A "passive" setup normally requires port-forwarding or a network TAP to collect packets and offload analysis. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 26, 2016, 3:20pm UTC](https://discuss.elastic.co/t/packetbeat-on-mips/66997/7 "2016-12-26T15:20:39Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.