简体繁体 English

如何配置Packetbeat在Windows上嗅探“任何”设备？

[英]How to configure Packetbeat to sniff “any” devices on Windows?

原文 2018-03-21 01:54:05 6 1 elasticsearch/ packet-sniffers/ packetbeat

The documentation for Packetbeat is pretty straightforward and says it very clearly as stated below Packetbeat的文档非常简单明了，如下所述

On Linux, you can specify any for the device, and Packetbeat captures all messages sent or received by the server where Packetbeat is installed. 在Linux上，您可以为设备指定任何值，然后Packetbeat捕获由安装Packetbeat的服务器发送或接收的所有消息。

For the configuration 对于配置

packetbeat.interfaces.device: any

But has absolutely nothing on how to do the same on Windows. 但是，在Windows上如何执行此操作绝对没有任何意义。

Any idea how? 任何想法如何？

1 个解决方案

Currently, Packetbeat does not support Mulitple interfaces ie packetbeat.interfaces.device: any in windows. 当前，Packetbeat不支持packetbeat.interfaces.device: any接口，即packetbeat.interfaces.device: any Windows中的packetbeat.interfaces.device: any接口。

However, there is an open issue for enhancement on GitHub for Packetbeat. 但是，对于Packetbeat，GitHub上存在一个增强的开放问题。 So there is a chance in future that it may be out there but for now, there is no such thing in Packetbeat to capture all interfaces traffic in windows using packetbeat.interfaces.device: any . 因此，将来可能会出现这种情况，但就目前而言，Packetbeat中没有这样的东西可以使用packetbeat.interfaces.device: any捕获Windows中的所有接口流量。 This feature is only Linux specific. 此功能仅适用于Linux。