Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Packetbeat protocol analyzer configuration enhancements #3518
This change allows for configuring packetbeat protocols in 2 different styles... both styles can be used at the same time.
1.) dictionary style:
2.) array style:
Examples (1) and (2) are equivalent. But array style allows to configure a protocol analyzer multiple times: e.g.
(3) array style with multiple instances of http protocol analyzer:
a) due to limitations in yaml parser, only capturing the last 'name' in a dictionary the key name
b) Reusing port numbers (overlapping) might result in one module not seeing any packets (this is already the case if any 2 protocols shall listen on same port number). e.g.:
Feb 22, 2017
One step closer to have beats configs unified
About defining a port multiple times. This is kind of similar to defining a file multiple times in filebeat, just easier to detect. If there would be a registry of ports, we could return an error in case this happens.
Having protocols as list will also make it easier to implement config reloading.