# Unable to capture traffic in Solaris 11

**URL:** https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575
**Category:** Beats
**Tags:** packetbeat
**Created:** [November 25, 2015, 3:16pm UTC](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575 "2015-11-25T15:16:13Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![RdrgPorto](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rdrgporto/32/13278_2.png) [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)
#### Post date: [November 25, 2015, 3:16pm UTC](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575/1 "2015-11-25T15:16:13Z")

</div>

Hi, first, sorry about my English.

We need to use packetbeat on Solaris 11 servers.

Using go 1.5 builds OK:

**ldd ./packetbeat-1.0.0-rc1**

> libsocket.so.1 =\> /lib/64/libsocket.so.1  
> libnsl.so.1 =\> /lib/64/libnsl.so.1  
> libsendfile.so.1 =\> /lib/64/libsendfile.so.1  
> libpcap.so.1 =\> /usr/lib/64/libpcap.so.1  
> libc.so.1 =\> /lib/64/libc.so.1  
> libmp.so.2 =\> /lib/64/libmp.so.2  
> libmd.so.1 =\> /lib/64/libmd.so.1  
> libsoftcrypto.so.1 =\> /lib/64/libsoftcrypto.so.1  
> libelf.so.1 =\> /lib/64/libelf.so.1  
> libcryptoutil.so.1 =\> /lib/64/libcryptoutil.so.1  
> libz.so.1 =\> /lib/64/libz.so.1  
> libm.so.2 =\> /lib/64/libm.so.2

But then, trying to capture traffic (with simultaneous curl requests to some HTTP servers):

**./packetbeat-1.0.0-rc1 -c ./etc/packetbeat.yml -e -v -d "\*"**

> 2015/11/25 14:56:36.605957 beat.go:94: DBG Initializing output plugins  
> 2015/11/25 14:56:36.606057 geolite.go:52: WARN Couldn't load GeoIP database  
> 2015/11/25 14:56:36.606242 publish.go:196: DBG create output worker: 0xc82115a010, 0xc82115a010  
> 2015/11/25 14:56:36.606308 publish.go:233: DBG No output is defined to store the topology. The server fields might not be filled.  
> 2015/11/25 14:56:36.606384 publish.go:245: INFO No shipper name configured, using hostname 'yvas0f00'  
> 2015/11/25 14:56:36.606570 beat.go:103: DBG Init packetbeat  
> 2015/11/25 14:56:36.607551 packetbeat.go:153: DBG Initializing protocol plugins  
> 2015/11/25 14:56:36.607600 mongodb.go:73: DBG Init a MongoDB protocol parser  
> 2015/11/25 14:56:36.607634 memcache.go:105: DBG init memcache plugin  
> 2015/11/25 14:56:36.607652 memcache.go:158: DBG maxValues = 0  
> 2015/11/25 14:56:36.607661 memcache.go:159: DBG maxBytesPerValue = 2147483647  
> 2015/11/25 14:56:36.607718 tcp.go:211: DBG Port map: map[5432:pgsql 9090:thrift 27017:mongodb 80:http 8080:http 5000:http 11211:memcache 8000:http 8002:http 3306:mysql 6379:redis]  
> 2015/11/25 14:56:36.607743 udp.go:93: DBG Port map: map[53:dns 11211:memcache]  
> 2015/11/25 14:56:36.607758 packetbeat.go:192: DBG Initializing sniffer  
> 2015/11/25 14:56:36.607800 sniffer.go:247: DBG BPF filter: tcp port 80 or tcp port 8080 or tcp port 8000 or tcp port 5000 or tcp port 8002 or tcp port 3306 or tcp port 6379 or tcp port 5432 or tcp port 9090 or tcp port 27017 or udp port 53 or port 11211  
> 2015/11/25 14:56:36.607823 sniffer.go:129: DBG Sniffer type: pcap device: net0  
> 2015/11/25 14:56:36.609211 decoder.go:37: DBG Layer type: Ethernet  
> 2015/11/25 14:56:36.609349 packetbeat.go:224: DBG Waiting for the sniffer to finish  
> 2015/11/25 14:56:37.105269 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:37.605234 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:38.105222 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:38.605204 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:39.105191 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:39.605180 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:40.105165 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:40.605152 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:40.830239 service.go:24: DBG Received sigterm/sigint, stopping  
> 2015/11/25 14:56:41.105138 sniffer.go:293: DBG Interrupted  
> 2015/11/25 14:56:41.105223 sniffer.go:355: INFO Input finish. Processed 0 packets. Have a nice day!  
> 2015/11/25 14:56:41.105247 beat.go:137: DBG Cleanup

No single packet captured.

Same behavior with version 1.0.0

Same test on Linux works perfectly well.

Any idea? Some kind of bug or limitation in "gopacket" with non-Linux kernels?

Thanks in advance.

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [November 25, 2015, 8:18pm UTC](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575/2 "2015-11-25T20:18:02Z")

</div>

See my response in the Github issue you created:

> <https://github.com/elastic/beats/issues/400>

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:57pm UTC](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575/3 "2017-07-05T21:57:59Z")

</div>


