无法在Packetbeat中跟踪Mysql

Question

1. 我正在使用packetbeat进行监视，并使用ubuntu作为操作系统。
2. 我配置了所有的东西，MySQL的端口是3306。我在基班纳获得了仪表板，但是如果我开始使用MySQL，我就不会在Packetbeat中得到任何信息。它无法追踪。

[interfaces] #Select on which network interfaces to sniff. You can use the "any" # keyword to sniff on all connected interfaces. device = "any"

[protocols] #Configure which protocols to monitor and on which ports are they #running. You can disable a given protocol by commenting out its #configuration.

[protocols.http] ports = [80, 8080, 8000, 5000, 8002]

[protocols.mysql] ports = [3306]

[protocols.pgsql] ports = [5432]

#[protocols.redis] #ports = [6379]

Answer 1

如果使用"localhost“，MySQL将尝试通过UNIX进行连接(参见https://dev.mysql.com/doc/refman/5.5/en/connecting.html)。但是，如果您指定IP (可能是127.0.0.1)，它将通过TCP进行连接，从而允许Packet节拍嗅探该连接。