This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Capture ICMP traffic
editCapture ICMP traffic
editThe icmp
section of the packetbeat.yml
config file specifies options for
the ICMP protocol. Here is a sample configuration section for ICMP:
packetbeat.protocols: - type: icmp enabled: true
Configuration options
editAlso see Common protocol options.
enabled
editThe ICMP protocol can be enabled/disabled via this option. The default is true.
If enabled Packetbeat will generate the following BPF filter: "icmp or icmp6"
.