Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Packetbeat] Disable install/auto-update of npcap #34420

Closed
jamiehynds opened this issue Jan 30, 2023 · 1 comment · Fixed by #34428
Closed

[Packetbeat] Disable install/auto-update of npcap #34420

jamiehynds opened this issue Jan 30, 2023 · 1 comment · Fixed by #34428
Assignees

Comments

@jamiehynds
Copy link

When we initially started shipping npcap with Packetbeat and Network Packet Capture integration, we deferred on implementing config options to disable installation of our bundled npcap version and auto-updating our npcap instance. We were unsure on the use cases for these options, so we intentionally didn't focus on them.

Thanks to this Discuss issue we have identified a case where Microsoft's Defender for Identity relies on npcap 1.0, but we keep up to date with npcap and now run 1.70. Without the option to disable install/auto-update of our bundled npcap, Defender for Identity will continue to display warnings (even though functionality isn't affected).

This issue is intended to capture other use cases and discuss how we implement these config options. Some prior discussions available here.

@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants