Packetbeat at GDG Berlin meetup

Open source network and application tracing

Monica Sarbu & Tudor Golubenco

• Sniffs and dissects packets on the network

• { “method”: “GET”, “path”: “/users/“, “status”: “OK”, “http.code”: 200, “http.phrase”: “OK” …}

• {“responsetime”: 12000, “bytes_out”: 578 …}

• {“service”: “Service15”, “host”: “alpha” … }

• Inserts this data in Elasticsearch

Imagine having the Firebug network tab not only when developing

but also in production

For all users, all the time

And between servers as well

even between processes on the same host

All of this with history, indexed and searchable

So you can troubleshoot an error from yesterday

Visualise your topology

Visualise response times

Find problematic hosts / URLs / queries / services / methods / …

Compare different services / servers / URLs / methods / …

Graphs have sub-second resolution

Protocol support

• HTTP

• MySQL

• PostgreSQL

• REDIS

• Thrift-RPC

• DNS

• Memcache

• Oracle

• MSSQL

• Sybase

• MongoDB

• Cassandra

soon™:

Plans for 2015• New inputs (besides sniffing):

• Middleware agents for Revel, Martini, Rails, Django

• JVM byte-code-injection agent

• API gateway for 3rd party services

• Y! Boomerang for RUM

• Nginx/Apache log files

• Your own instrumentation code

processorsinputs outputs

Normalise URLs / Queries Obfuscate parameters

• Transforms:

• SELECT * FROM table WHERE name=“Foobar” AND value=123;

• To

• SELECT * FROM table WHERE name=[S8] AND value=[N128];

We’re hiring*

• http://packetbeat.com

• @packetbeat

*We’re not paying