WARNING: Version 5.4 of Packetbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Running Packetbeat on Docker Capturing Traffic from the Host System »
Elastic Docs ›Packetbeat Reference [5.4] ›Running Packetbeat on Docker

Required Network Capabilities

edit

Required Network Capabilities

edit

Under Docker, Packetbeat runs as a non-root user, but requires some privileged network capabilities to operate correctly. Ensure that the NET_ADMIN capability is available to the container.

docker run --cap-add=NET_ADMIN docker.elastic.co/beats/packetbeat:5.4.3
« Running Packetbeat on Docker Capturing Traffic from the Host System »