配置要监控的交易协议

编辑

配置要监控的交易协议编辑

packetbeat.yml 配置文件中的 packetbeat.protocols 部分包含每个受支持协议的配置选项,包括 enabledportssend_requestsend_response 等通用选项以及特定于协议的选项。

目前,Packetbeat 支持以下协议:

  • ICMP(v4 和 v6)
  • DHCP(v4)
  • DNS
  • HTTP
  • AMQP 0.9.1
  • Cassandra
  • Mysql
  • PostgreSQL
  • Redis
  • Thrift-RPC
  • MongoDB
  • Memcache
  • NFS
  • TLS
  • SIP/SDP(beta)

示例配置

packetbeat.protocols:

- type: icmp
  enabled: true

- type: dhcpv4
  ports: [67, 68]

- type: dns
  ports: [53]

- type: http
  ports: [80, 8080, 8000, 5000, 8002]

- type: amqp
  ports: [5672]

- type: cassandra
  ports: [9042]

- type: memcache
  ports: [11211]

- type: mysql
  ports: [3306,3307]

- type: redis
  ports: [6379]

- type: pgsql
  ports: [5432]

- type: thrift
  ports: [9090]

- type: tls
  ports: [443, 993, 995, 5223, 8443, 8883, 9243]