Is there way to get the response code of https calls using packetbeat. I don’t see any protocol for https. The goal is to monitor https traffic
Asked
Active
Viewed 156 times
1 Answers
0
With elastic agent Network Packet Capture or Packetbeat you can capture (sniff) and analyze network traffic from a host.
I tried with HTTP and HTTPS traffic and both of them are working fine. You can even collect the body with HTTP.
For HTTPS you can only capture the headers.
Another recommendation: PROXY
Also, you can use a proxy like NGINX, or HaProxy to monitor requests or you can use packetbeat or Elastic agent to collect them.
Musab Dogan
- 1,811
- 1
- 6
- 8
-
Which protocol you used to monitor https traffic? – Sowmiya May 27 '23 at 23:46
-
I used the HTTP protocol to monitor HTTPS traffic – Musab Dogan May 28 '23 at 06:37
-
Shouldn’t we use tls? Documentation says http protocol is to monitor only http traffic – Sowmiya May 28 '23 at 07:38
-
https://docs.elastic.co/en/integrations/network_traffic#tls yes you can use TLS, it would be much more make sense. – Musab Dogan May 29 '23 at 08:55
-
I tried with both tls and http protocol. I could not see headers of https traffic – Sowmiya May 29 '23 at 14:50