---
title: Protocol-Specific Metrics
description: Packetbeat exposes per-protocol metrics under the HTTP monitoring endpoint. These metrics are exposed under the /inputs/ path. They can be used to observe...
url: https://www.elastic.co/docs/reference/beats/packetbeat/protocol-metrics-packetbeat
products:
  - Beats
  - Packetbeat
applies_to:
  - Elastic Stack: Generally available
---

# Protocol-Specific Metrics
Packetbeat exposes per-protocol metrics under the [HTTP monitoring endpoint](https://www.elastic.co/docs/reference/beats/packetbeat/http-endpoint). These metrics are exposed under the `/inputs/` path. They can be used to observe the activity of Packetbeat for the monitored protocol.

## AF_PACKET Metrics


| Metric                 | Description                                                     |
|------------------------|-----------------------------------------------------------------|
| `device`               | Name of the device being monitored.                             |
| `socket_packets`       | Number of packets delivered by the kernel to the shared buffer. |
| `socket_drops`         | Number of packets dropped by the kernel on the socket.          |
| `socket_queue_freezes` | Number of kernel queue freezes on the socket.                   |
| `packets`              | Number of packets handled by Packetbeat.                        |
| `polls`                | Number of blocking syscalls made waiting for packets.           |


## TCP Metrics


| Metric                        | Description                                                           |
|-------------------------------|-----------------------------------------------------------------------|
| `device`                      | Name of the device being monitored.                                   |
| `received_events_total`       | Number of packets processed.                                          |
| `received_bytes_total`        | Number of bytes processed.                                            |
| `tcp_overlaps`                | Number of packets shrunk due to overlap.                              |
| `tcp.dropped_because_of_gaps` | Number of packets dropped because of gaps.                            |
| `arrival_period`              | Histogram of the elapsed time between packet arrivals.                |
| `processing_time`             | Histogram of the elapsed time between packet receipt and publication. |
| `fin_flags_total`             | Number of TCP FIN (finish) flags observed.                            |
| `syn_flags_total`             | Number of TCP SYN (synchronization) flags observed.                   |
| `rst_flags_total`             | Number of TCP RST (reset) flags observed.                             |
| `psh_flags_total`             | Number of TCP PSH (push) flags observed.                              |
| `ack_flags_total`             | Number of TCP ACK (acknowledgement) flags observed.                   |
| `urg_flags_total`             | Number of TCP URG (urgent) flags observed.                            |
| `ece_flags_total`             | Number of TCP ECE (ECN echo) flags observed.                          |
| `cwr_flags_total`             | Number of TCP CWR (congestion window reduced) flags observed.         |
| `ns_flags_total`              | Number of TCP NS (nonce sum) flags observed.                          |
| `received_headers_total`      | Number of headers observed, including unprocessed packets.            |


## UDP Metrics


| Metric                  | Description                                                           |
|-------------------------|-----------------------------------------------------------------------|
| `device`                | Name of the device being monitored.                                   |
| `received_events_total` | Number of packets processed.                                          |
| `received_bytes_total`  | Number of bytes processed.                                            |
| `arrival_period`        | Histogram of the elapsed time between packet arrivals.                |
| `processing_time`       | Histogram of the elapsed time between packet receipt and publication. |