Fails to start with pcap.OpenLive failed(): : No such device exists #2

srenatus · 2014-05-08T14:37:34Z

Hi,

trying out packetbeat, I noticed that it dies on all of our servers with this:

May  8 14:32:42 node21 2014-05-08T14:32:42Z node21 /usr/bin/packetbeat[17772]: main.go:225: pcap.Openlive failed(): : No such device exists (SIOCGIFHWADDR: No such device)

It device is set to any and besides some ports nothing was changed in packetbeat.conf. Any hints would be much appreciated, and I'd gladly provide more information...

The environment in question:

$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=12.04
DISTRIB_CODENAME=precise
DISTRIB_DESCRIPTION="Ubuntu 12.04.4 LTS"
$ uname -a
Linux node21 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
$ aptitude show libpcap0.8
Package: libpcap0.8
State: installed
Automatically installed: no
Multi-Arch: same
Version: 1.1.1-10
#...

Thanks a lot
Stephan

The text was updated successfully, but these errors were encountered:

srenatus · 2014-05-08T14:44:21Z

Update, "just a few ports changed" was the problem. Missing a comma in the http port list caused this error. While this issue could be closed, I still wonder how causation works in this case ;)

srenatus · 2014-05-08T14:47:33Z

Nevermind, I was just not looking closely enough. Sorry for the noise.

# packetbeat -e -c /root/packetbeat.conf
TOML config parsing failed on /root/packetbeat.conf: Near line 21, key 'protocols.http.ports': Near line 21: Expected an array value terminator ',' or an array terminator ']', but got '8' instead.. We will use defaults.
main.go:225: ERR  pcap.Openlive failed(): : No such device exists (SIOCGIFHWADDR: No such device)

Remove disable race flag from worker_test

Calculate %CPU per process as it's done by top

Update docs and license files to follow other beats standard

removing vim swampfile

This includes infrabeat. Part of elastic/beats#2

I missed these in the previous commit because of .gitignore being to inclusive. elastic/beats#2.

Add c-style multiline log tests

This includes infrabeat. Part of elastic#2

I missed these in the previous commit because of .gitignore being to inclusive. elastic#2.

Remove disable race flag from worker_test

* Add Nginx module with stub status metric set * Return error if Nginx stub status cannot be parsed * Add Nginx stub status integration test * Add fields for Nginx and Nginx stub metricset (#2)

Update Makefile and add Travis

* Use specific beat name's instead of 'the Beat' * Dont show Logstash info unless it's supported. * Make the index pattern decoupled from the beat name * Make it possible to skip the pipeline docs in output.elasticsearch * Introduce beat_default_index_prefix. * Use name of beat in shared-kibana-config.asciidoc * Add .\ for PS instruction and make it possible to remove logstash mention. * Introduce 'has_ml_jobs' * Added `html_docs` to .gitignore * Better outputconfig for Elasticsearch only beats. * Less blamy wording * Only talk about Filebeat for filebeat docs * Update the rest of the max_retries sections to only talk about Filebeat for filebeat * Special case for apm-server as it was only introduced in 6.0 * expand beat_default_index_prefix use (#2)

* Use specific beat name's instead of 'the Beat' * Dont show Logstash info unless it's supported. * Make the index pattern decoupled from the beat name * Make it possible to skip the pipeline docs in output.elasticsearch * Introduce beat_default_index_prefix. * Use name of beat in shared-kibana-config.asciidoc * Add .\ for PS instruction and make it possible to remove logstash mention. * Introduce 'has_ml_jobs' * Added `html_docs` to .gitignore * Better outputconfig for Elasticsearch only beats. * Less blamy wording * Only talk about Filebeat for filebeat docs * Update the rest of the max_retries sections to only talk about Filebeat for filebeat * Special case for apm-server as it was only introduced in 6.0 * expand beat_default_index_prefix use (elastic#2)

Commented out ineffecient and unused lines

Co-Authored-By: DeDe Morton <[email protected]>

…cher-poc Feature/es 1811 kubeapi fetcher generated poc

mtojek · 2022-04-14T14:29:40Z

Closed accidentally :)

botelastic · 2022-04-14T14:30:16Z

This issue doesn't have a Team:<team> label.

mtojek · 2022-05-30T10:08:54Z

This issue is really old. Resolving now.

* Use specific beat name's instead of 'the Beat' * Dont show Logstash info unless it's supported. * Make the index pattern decoupled from the beat name * Make it possible to skip the pipeline docs in output.elasticsearch * Introduce beat_default_index_prefix. * Use name of beat in shared-kibana-config.asciidoc * Add .\ for PS instruction and make it possible to remove logstash mention. * Introduce 'has_ml_jobs' * Added `html_docs` to .gitignore * Better outputconfig for Elasticsearch only beats. * Less blamy wording * Only talk about Filebeat for filebeat docs * Update the rest of the max_retries sections to only talk about Filebeat for filebeat * Special case for apm-server as it was only introduced in 6.0 * expand beat_default_index_prefix use (elastic#2)

* handle EOF on single line content (#33568) * handle EOF on single line content * changelog * fallback to encode_eof if no events in aws-s3 input * lint * lint * collect on EOF in line reader * remove encode eof * remove iterN * fix test * increase test coverage * linting * more linting * increase coverage (cherry picked from commit 7b45320) # Conflicts: # libbeat/reader/readfile/line.go # libbeat/reader/readfile/line_test.go # x-pack/filebeat/input/awss3/s3_objects.go * Fix conflicts * Fix failing test - TestMaxBytesLimit * Fix #2 failing test - TestMaxBytesLimit * Fix failing test checks * Fix linter errors * Fix typo * Fix linter errors #2 * Fix linter errors #3 * Fix linter errors #4 * Fix linter errors #5 * Changelog clean up * Change order of publish event --------- Co-authored-by: Andrea Spacca <[email protected]> Co-authored-by: Tamara Dancheva <[email protected]>

srenatus closed this as completed May 8, 2014

srenatus mentioned this issue May 8, 2014

The "default config" fallback doesn't work properly #3

Closed

urso pushed a commit that referenced this issue Dec 2, 2015

Merge pull request #2 from ruflin/urso-bug/228-race-in-test

eb57a9a

Remove disable race flag from worker_test

ruflin pushed a commit to ruflin/beats that referenced this issue Dec 2, 2015

Added basic README file. Closes elastic#2

eda7cea

ruflin pushed a commit to ruflin/beats that referenced this issue Dec 2, 2015

Merge pull request elastic#2 from monicasarbu/sigar

51d0cf5

Calculate %CPU per process as it's done by top

ruflin pushed a commit to ruflin/beats that referenced this issue Dec 2, 2015

Merge pull request elastic#2 from ruflin/docs-update

d94efce

Update docs and license files to follow other beats standard

shaunrampersad pushed a commit to shaunrampersad/packetbeat that referenced this issue Dec 2, 2015

Merge pull request elastic#2 from chayim/iss-1

a06284c

removing vim swampfile

KylinLL pushed a commit to KylinLL/elastic that referenced this issue Dec 7, 2015

Vendor the dependencies in preparation for 1.0.0.beta1

8d5dad1

This includes infrabeat. Part of elastic/beats#2

KylinLL pushed a commit to KylinLL/elastic that referenced this issue Dec 7, 2015

Make file target for installing the deps. elastic/beats#2

1163cd1

KylinLL pushed a commit to KylinLL/elastic that referenced this issue Dec 7, 2015

Vendor also the dependencies under the packetbeat username.

8001193

I missed these in the previous commit because of .gitignore being to inclusive. elastic/beats#2.

ruflin pushed a commit to ruflin/beats that referenced this issue Dec 28, 2015

Merge pull request elastic#2 from ruflin/mutiline-tests

180f448

Add c-style multiline log tests

tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016

Added basic README file. Closes elastic#2

62654a9

tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016

Vendor the dependencies in preparation for 1.0.0.beta1

dfe0bef

This includes infrabeat. Part of elastic#2

tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016

Make file target for installing the deps. elastic#2

3ae112f

tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016

Vendor also the dependencies under the packetbeat username.

d3920fd

I missed these in the previous commit because of .gitignore being to inclusive. elastic#2.

tsg pushed a commit to tsg/beats that referenced this issue Jan 20, 2016

Merge pull request elastic#2 from ruflin/urso-bug/228-race-in-test

d1a9067

Remove disable race flag from worker_test

dedemorton mentioned this issue Mar 1, 2016

Adds FAQ to Beats doc #1051

Merged

ruflin pushed a commit to ruflin/beats that referenced this issue May 30, 2016

Merge pull request elastic#2 from ruflin/travis

b7f294c

Update Makefile and add Travis

tarinidash mentioned this issue Sep 29, 2016

Filebeat-5.0.0-beta1 is not able to publish message to Kafka Cluster #2651

Closed

githubnovee mentioned this issue Oct 14, 2016

filebeat multiple large files high cpu 300% #2786

Closed

brandonmensing mentioned this issue Jan 13, 2017

Meta ticket: Filebeat modules #3159

Closed

22 tasks

andrew-d mentioned this issue May 22, 2017

Add TTL option to the logstash output #4343

Merged

perjahn mentioned this issue Feb 2, 2018

Make the url field of heartbeat aggregatable. #6263

Closed

brandonmensing mentioned this issue Mar 23, 2018

Document X-Pack Security permissions for Beats' Kibana Dashboard Feature #6649

Closed

cwurm pushed a commit to cwurm/beats that referenced this issue Oct 7, 2019

Update golden files elastic#2.

3cf0fd1

devon-kim added a commit to devon-kim/beats that referenced this issue Oct 29, 2019

Merge pull request elastic#2 from SRE/ISSUE_879_socket_summary_perf_fix

206d830

Commented out ineffecient and unused lines

kvch added a commit to kvch/beats that referenced this issue Dec 2, 2019

address review note elastic#2

f4dd9cd

Co-Authored-By: DeDe Morton <[email protected]>

dedemorton mentioned this issue Apr 28, 2020

[docs] Adds list of type changes to the 7.0 breaking changes docs #17911

Closed

This was referenced May 18, 2020

Cherry-pick #18591 to 7.8: o365: Support IPv4 enclosed in square brackets #18602

Merged

Cherry-pick #18585 to 7.x: Add support for array parsing in azure-eventhub input #18650

Merged

mattkime mentioned this issue Sep 15, 2020

[Metricbeat|Filebeat] Number of fields will prevent Kibana index pattern creation #20432

Closed

blakerouse mentioned this issue Jan 15, 2021

[Agent] [Filebeat] when Agent changes policy Filebeat config can trip up and Agent gets stuck on 'unhealthy' #23518

Closed

yashtewari pushed a commit that referenced this issue Dec 20, 2021

Merge pull request #2 from build-security/feature/ES-1811-kubeapi-fet…

6886ae7

…cher-poc Feature/es 1811 kubeapi fetcher generated poc

mtojek reopened this Apr 14, 2022

botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Apr 14, 2022

mtojek closed this as completed May 30, 2022

cmacknz mentioned this issue Sep 19, 2022

[Meta] Elastic Agent Inputs elastic/elastic-agent-inputs#1

Closed

33 tasks

tdancheva added a commit that referenced this issue May 24, 2023

Fix #2 failing test - TestMaxBytesLimit

1db4da9

tdancheva added a commit that referenced this issue May 29, 2023

Fix linter errors #2

8565da8

dliappis mentioned this issue Apr 30, 2024

Branch specific concurrency gates #39298

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fails to start with pcap.OpenLive failed(): : No such device exists #2

Fails to start with pcap.OpenLive failed(): : No such device exists #2

srenatus commented May 8, 2014

srenatus commented May 8, 2014

srenatus commented May 8, 2014

mtojek commented Apr 14, 2022

botelastic bot commented Apr 14, 2022

mtojek commented May 30, 2022

Fails to start with pcap.OpenLive failed(): : No such device exists #2

Fails to start with pcap.OpenLive failed(): : No such device exists #2

Comments

srenatus commented May 8, 2014

srenatus commented May 8, 2014

srenatus commented May 8, 2014

mtojek commented Apr 14, 2022

botelastic bot commented Apr 14, 2022

mtojek commented May 30, 2022