無法追查在mysql Packetbeat

Question

1. 我使用監控packetbeat，我使用Ubuntu作爲操作系統。

2. 我配置了一切，MySQL的端口是3306.我得到了kibana的儀表板，但是如果我開始使用MySQL，我在Packetbeat中沒有得到任何東西。它無法追查。

[interfaces] #Select on which network interfaces to sniff. You can use the "any" # keyword to sniff on all connected interfaces. device = "any"

[protocols] #Configure which protocols to monitor and on which ports are they #running. You can disable a given protocol by commenting out its #configuration.

[protocols.http] ports = [80, 8080, 8000, 5000, 8002]

[protocols.mysql] ports = [3306]

[protocols.pgsql] ports = [5432]

#[protocols.redis] #ports = [6379]

Answer 1

如果使用「localhost」（參見https://dev.mysql.com/doc/refman/5.5/en/connecting.html），MySQL將嘗試通過UNIX套接字進行連接。但是如果你指定了IP（可能是127.0.0.1），它將通過TCP連接，從而允許Packetbeat嗅探該連接。