Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

packetbeat: add metrics for TCP header flags #36992

Closed
efd6 opened this issue Oct 30, 2023 · 1 comment · Fixed by #36975
Closed

packetbeat: add metrics for TCP header flags #36992

efd6 opened this issue Oct 30, 2023 · 1 comment · Fixed by #36975

Comments

@efd6
Copy link
Contributor

efd6 commented Oct 30, 2023

TCP flags are potentially useful for early-detecting/diagnosing network outages. This is not a feature that packetbeat currently provides, but would be useful and has been requested.

Logging every TCP packet's header as an event in packetbeat would be onerously expensive. However, it would be reasonable to add a set of metrics for the TCP header flags. This would allow detection of significant changes in e.g. RST flag observation in order to make early responses to network degradation.

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Oct 30, 2023
@efd6 efd6 self-assigned this Oct 30, 2023
@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Oct 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants