Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #11366 to 7.x: packetbeat: Enable setting promiscuous mode automatically #16104

Merged
merged 1 commit into from
Feb 5, 2020

Conversation

michalpristas
Copy link
Contributor

@michalpristas michalpristas commented Feb 5, 2020

Cherry-pick of PR #11366 to 7.x branch. Original message:

This PR tries to enable promiscuous mode when using af_packet.

Few things to mention

  • when it fails it does not panic just logs the failure, mostly because of and backward compatibility
  • on exit: it resets promisc mode to whatever it was before
  • when any is used it does not set the mode to promiscuous - following pcap

Fixes #700

Manual testing guide:

Basic check:

  • check promisc mode is disabled on your device (e.g. ip link show {device}) (look for PROMISC keyword)
  • enable promisc mode by including packetbeat.interfaces.auto_promisc_mode: true into packetbeat config
  • check promisc mode is enabled (e.g. ip link show {device})
  • stop packetbeat
  • check promisc mode is disabled (e.g. ip link show {device})

Already on promisc check:

  • enable promisc mode on your devide (e.g. ifconfig {device} promisc or ip link set {device} promisc on
  • enable promisc mode by including packetbeat.interfaces.auto_promisc_mode: true into packetbeat config
  • check promisc mode is enabled (e.g. ip link show {device})
  • stop packetbeat
  • check promisc mode is still enabled (e.g. ip link show {device})

)

packetbeat: Enable setting promiscuous mode automatically  (elastic#11366)
(cherry picked from commit 49b0eb9)
@michalpristas michalpristas merged commit 393e408 into elastic:7.x Feb 5, 2020
@andresrc andresrc added the Team:Integrations Label for the Integrations team label Mar 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport Packetbeat Team:Integrations Label for the Integrations team test-plan Add this PR to be manual test plan
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants