Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Packetbeat process monitor doesn't work with IPv6 disabled #19941

Closed
adriansr opened this issue Jul 15, 2020 · 2 comments · Fixed by #19945
Closed

Packetbeat process monitor doesn't work with IPv6 disabled #19941

adriansr opened this issue Jul 15, 2020 · 2 comments · Fixed by #19945
Assignees
@adriansr
Labels
bug Packetbeat

Comments

@adriansr
Copy link
Contributor

For confirmed bugs, please report:

  • Version: -
  • Operating System: Linux
  • Discuss Forum URL: -
  • Steps to Reproduce:

Boot kernel with ipv6.disable=1.

Run Packetbeat with -E packetbeat.procs.enabled=true.

You'll get the following errors during process enrichment:

2020-07-15T10:01:30.006Z	ERROR	procs/procs_linux.go:73	GetLocalPortToPIDMapping: parsing '/proc/net/tcp6': open /proc/net/tcp6: no such file or directory
2020-07-15T10:01:30.006Z	ERROR	procs/procs.go:224	unable to list local ports: open /proc/net/tcp6: no such file or directory
@adriansr adriansr self-assigned this Jul 15, 2020
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Jul 15, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Jul 15, 2020
adriansr added a commit to adriansr/beats that referenced this issue Jul 15, 2020
@adriansr
Process monitor: Ignore missing /proc/net/tcp6
4d6596a 
This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941
@adriansr adriansr mentioned this issue Jul 15, 2020
Merged
6 tasks
@adriansr
Copy link
Contributor Author

Also tested under Windows, no similar bug in there.

adriansr added a commit that referenced this issue Jul 17, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (#19945)
4ce680c 
This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes #19941
adriansr added a commit to adriansr/beats that referenced this issue Jul 17, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (elastic#19945
b61ecdb 
)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941

(cherry picked from commit 4ce680c)
@adriansr adriansr mentioned this issue Jul 17, 2020
Merged
6 tasks
adriansr added a commit to adriansr/beats that referenced this issue Jul 17, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (elastic#19945
7176929 
)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941

(cherry picked from commit 4ce680c)
@adriansr adriansr mentioned this issue Jul 17, 2020
Merged
6 tasks
adriansr added a commit to adriansr/beats that referenced this issue Jul 17, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (elastic#19945
12748f3 
)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941

(cherry picked from commit 4ce680c)
@adriansr adriansr mentioned this issue Jul 17, 2020
Merged
6 tasks
adriansr added a commit that referenced this issue Jul 20, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (#19945) (#…
1a802fb 
…20013)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes #19941

(cherry picked from commit 4ce680c)
adriansr added a commit that referenced this issue Jul 20, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (#19945) (#…
a3bb99d 
…20014)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes #19941

(cherry picked from commit 4ce680c)
adriansr added a commit that referenced this issue Jul 20, 2020
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (#19945) (#…
5877e19 
…20015)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes #19941

(cherry picked from commit 4ce680c)
melchiormoulin pushed a commit to melchiormoulin/beats that referenced this issue Oct 14, 2020
@adriansr @melchiormoulin
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (elastic#19945
9486473 
)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941
leweafan pushed a commit to leweafan/beats that referenced this issue Apr 28, 2023
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (elastic#19945
7ade56b 
) (elastic#20014)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941

(cherry picked from commit 95166b9)
leweafan pushed a commit to leweafan/beats that referenced this issue Apr 28, 2023
@adriansr
Packetbeat process monitor: Ignore missing /proc/net/tcp6 (elastic#19945
3701c6e 
) (elastic#20015)

This makes Packetbeat's process monitor to continue execution when
/proc/net/tcp6 is missing (ipv6 disabled in kernel).

Closes elastic#19941

(cherry picked from commit 95166b9)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@adriansr adriansr

Labels
bug Packetbeat
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Packetbeat process monitor: Ignore missing /proc/net/tcp6 adriansr/beats
2 participants
@adriansr @elasticmachine