WARNING: Version 5.6 of Packetbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

Elastic Docs ›Packetbeat Reference [5.6] ›Running Packetbeat on Docker
« Running Packetbeat on Docker Capturing Traffic from the Host System »

Required Network Capabilitiesedit

Under Docker, Packetbeat runs as a non-root user, but requires some privileged network capabilities to operate correctly. Ensure that the NET_ADMIN capability is available to the container.

docker run --cap-add=NET_ADMIN docker.elastic.co/beats/packetbeat:5.6.16
« Running Packetbeat on Docker Capturing Traffic from the Host System »