Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SIEM][Auditbeat] Fix IPv6 for kernels older than 3.13 #13497

Merged
merged 3 commits into from
Sep 5, 2019

Conversation

adriansr
Copy link
Contributor

@adriansr adriansr commented Sep 4, 2019

This fixes a known problem with the system/socket dataset. Before 3.13 an extra level of indirection is needed to access IPv6 addresses from a struct inet_sock.

Relates #13058

This fixes a known problem with the system/socket dataset. Before 3.13
an extra level of indirection is needed to access IPv6 addresses from a
struct inet_sock.

Relates elastic#13058
@adriansr adriansr added review needs_backport PR is waiting to be backported to other branches. Auditbeat Team:SIEM labels Sep 4, 2019
@adriansr adriansr requested a review from a team as a code owner September 4, 2019 18:10
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem

Copy link
Member

@andrewkroh andrewkroh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I ran a quick test with this on CentOS 6.10 (2.6.32-696.30.1.el6.x86_64) and it works now.

Move failure point to Prepare() so Guesses() works under tests.
@adriansr adriansr merged commit dc6c013 into elastic:master Sep 5, 2019
adriansr added a commit to adriansr/beats that referenced this pull request Sep 5, 2019
This fixes a known problem with the system/socket dataset. Before 3.13
an extra level of indirection is needed to access IPv6 addresses from a
struct inet_sock.

Relates elastic#13058

(cherry picked from commit dc6c013)
@adriansr adriansr added v7.4.0 and removed needs_backport PR is waiting to be backported to other branches. labels Sep 5, 2019
adriansr added a commit that referenced this pull request Sep 6, 2019
This fixes a known problem with the system/socket dataset. Before 3.13
an extra level of indirection is needed to access IPv6 addresses from a
struct inet_sock.

Relates #13058

(cherry picked from commit dc6c013)
leweafan pushed a commit to leweafan/beats that referenced this pull request Apr 28, 2023
elastic#13523)

This fixes a known problem with the system/socket dataset. Before 3.13
an extra level of indirection is needed to access IPv6 addresses from a
struct inet_sock.

Relates elastic#13058

(cherry picked from commit ced7862)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants