Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fails to start with pcap.OpenLive failed(): : No such device exists #2

Closed
Tracked by #1
srenatus opened this issue May 8, 2014 · 5 comments
Closed
Tracked by #1
Labels
needs_team Indicates that the issue/PR needs a Team:* label

Comments

@srenatus
Copy link
Contributor

srenatus commented May 8, 2014

Hi,

trying out packetbeat, I noticed that it dies on all of our servers with this:

May  8 14:32:42 node21 2014-05-08T14:32:42Z node21 /usr/bin/packetbeat[17772]: main.go:225: pcap.Openlive failed(): : No such device exists (SIOCGIFHWADDR: No such device)

It device is set to any and besides some ports nothing was changed in packetbeat.conf. Any hints would be much appreciated, and I'd gladly provide more information...

The environment in question:

$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04
DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION="Ubuntu 12.04.4 LTS"
$ uname -a
Linux node21 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
$ aptitude show libpcap0.8
Package: libpcap0.8
State: installed
Automatically installed: no
Multi-Arch: same
Version: 1.1.1-10
#...

Thanks a lot
Stephan

@srenatus
Copy link
Contributor Author

srenatus commented May 8, 2014

Update, "just a few ports changed" was the problem. Missing a comma in the http port list caused this error. While this issue could be closed, I still wonder how causation works in this case ;)

@srenatus
Copy link
Contributor Author

srenatus commented May 8, 2014

Nevermind, I was just not looking closely enough. Sorry for the noise.

# packetbeat -e -c /root/packetbeat.conf
TOML config parsing failed on /root/packetbeat.conf: Near line 21, key 'protocols.http.ports': Near line 21: Expected an array value terminator ',' or an array terminator ']', but got '8' instead.. We will use defaults.
main.go:225: ERR  pcap.Openlive failed(): : No such device exists (SIOCGIFHWADDR: No such device)

@srenatus srenatus closed this as completed May 8, 2014
urso pushed a commit that referenced this issue Dec 2, 2015
Remove disable race flag from worker_test
ruflin pushed a commit to ruflin/beats that referenced this issue Dec 2, 2015
ruflin pushed a commit to ruflin/beats that referenced this issue Dec 2, 2015
Calculate %CPU per process as it's done by top
ruflin pushed a commit to ruflin/beats that referenced this issue Dec 2, 2015
Update docs and license files to follow other beats standard
shaunrampersad pushed a commit to shaunrampersad/packetbeat that referenced this issue Dec 2, 2015
KylinLL pushed a commit to KylinLL/elastic that referenced this issue Dec 7, 2015
KylinLL pushed a commit to KylinLL/elastic that referenced this issue Dec 7, 2015
KylinLL pushed a commit to KylinLL/elastic that referenced this issue Dec 7, 2015
I missed these in the previous commit because of .gitignore being
to inclusive. elastic/beats#2.
ruflin pushed a commit to ruflin/beats that referenced this issue Dec 28, 2015
Add c-style multiline log tests
tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016
tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016
tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016
tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016
I missed these in the previous commit because of .gitignore being
to inclusive. elastic#2.
tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016
Remove disable race flag from worker_test
ruflin pushed a commit that referenced this issue May 17, 2016
* Add Nginx module with stub status metric set
* Return error if Nginx stub status cannot be parsed
* Add Nginx stub status integration test
* Add fields for Nginx and Nginx stub metricset (#2)
ruflin pushed a commit to ruflin/beats that referenced this issue May 30, 2016
Update Makefile and add Travis
roncohen added a commit that referenced this issue Feb 22, 2018
* Use specific beat name's instead of 'the Beat'
* Dont show Logstash info unless it's supported.
* Make the index pattern decoupled from the beat name
* Make it possible to skip the pipeline docs in output.elasticsearch
* Introduce beat_default_index_prefix.
* Use name of beat in shared-kibana-config.asciidoc
* Add .\ for PS instruction and make it possible to remove logstash mention.
* Introduce 'has_ml_jobs'
* Added `html_docs` to .gitignore
* Better outputconfig for Elasticsearch only beats.
* Less blamy wording
* Only talk about Filebeat for filebeat docs
* Update the rest of the max_retries sections to only talk about Filebeat for filebeat
* Special case for apm-server as it was only introduced in 6.0
* expand beat_default_index_prefix use (#2)
simitt pushed a commit to simitt/beats that referenced this issue Apr 17, 2018
* Use specific beat name's instead of 'the Beat'
* Dont show Logstash info unless it's supported.
* Make the index pattern decoupled from the beat name
* Make it possible to skip the pipeline docs in output.elasticsearch
* Introduce beat_default_index_prefix.
* Use name of beat in shared-kibana-config.asciidoc
* Add .\ for PS instruction and make it possible to remove logstash mention.
* Introduce 'has_ml_jobs'
* Added `html_docs` to .gitignore
* Better outputconfig for Elasticsearch only beats.
* Less blamy wording
* Only talk about Filebeat for filebeat docs
* Update the rest of the max_retries sections to only talk about Filebeat for filebeat
* Special case for apm-server as it was only introduced in 6.0
* expand beat_default_index_prefix use (elastic#2)
cwurm pushed a commit to cwurm/beats that referenced this issue Oct 7, 2019
devon-kim added a commit to devon-kim/beats that referenced this issue Oct 29, 2019
kvch added a commit to kvch/beats that referenced this issue Dec 2, 2019
Co-Authored-By: DeDe Morton <dede.morton@elastic.co>
yashtewari pushed a commit that referenced this issue Dec 20, 2021
…cher-poc

Feature/es 1811 kubeapi fetcher generated poc
@mtojek
Copy link
Contributor

mtojek commented Apr 14, 2022

Closed accidentally :)

@mtojek mtojek reopened this Apr 14, 2022
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Apr 14, 2022
@botelastic
Copy link

botelastic bot commented Apr 14, 2022

This issue doesn't have a Team:<team> label.

@mtojek
Copy link
Contributor

mtojek commented May 30, 2022

This issue is really old. Resolving now.

@mtojek mtojek closed this as completed May 30, 2022
leweafan pushed a commit to leweafan/beats that referenced this issue Apr 28, 2023
* Use specific beat name's instead of 'the Beat'
* Dont show Logstash info unless it's supported.
* Make the index pattern decoupled from the beat name
* Make it possible to skip the pipeline docs in output.elasticsearch
* Introduce beat_default_index_prefix.
* Use name of beat in shared-kibana-config.asciidoc
* Add .\ for PS instruction and make it possible to remove logstash mention.
* Introduce 'has_ml_jobs'
* Added `html_docs` to .gitignore
* Better outputconfig for Elasticsearch only beats.
* Less blamy wording
* Only talk about Filebeat for filebeat docs
* Update the rest of the max_retries sections to only talk about Filebeat for filebeat
* Special case for apm-server as it was only introduced in 6.0
* expand beat_default_index_prefix use (elastic#2)
tdancheva added a commit that referenced this issue May 24, 2023
tdancheva added a commit that referenced this issue May 29, 2023
tdancheva added a commit that referenced this issue Jun 5, 2023
* handle EOF on single line content (#33568)

* handle EOF on single line content

* changelog

* fallback to encode_eof if no events in aws-s3 input

* lint

* lint

* collect on EOF in line reader

* remove encode eof

* remove iterN

* fix test

* increase test coverage

* linting

* more linting

* increase coverage

(cherry picked from commit 7b45320)

# Conflicts:
#	libbeat/reader/readfile/line.go
#	libbeat/reader/readfile/line_test.go
#	x-pack/filebeat/input/awss3/s3_objects.go

* Fix conflicts

* Fix failing test - TestMaxBytesLimit

* Fix #2 failing test - TestMaxBytesLimit

* Fix failing test checks

* Fix linter errors

* Fix typo

* Fix linter errors #2

* Fix linter errors #3

* Fix linter errors #4

* Fix linter errors #5

* Changelog clean up

* Change order of publish event

---------

Co-authored-by: Andrea Spacca <andrea.spacca@elastic.co>
Co-authored-by: Tamara Dancheva <tamara.dancheva@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs_team Indicates that the issue/PR needs a Team:* label
Projects
None yet
Development

No branches or pull requests

2 participants