Christoph Wurm

@asekhar Not yet. Though we are working on some enhancements to Auditbeat that will allow to collect additional information on macOS as well. If you don't mind me asking -...

> Works in 23.12: https://fiddle.clickhouse.com/54d9d49d-9f0b-4959-8f7b-474ce67824d7 > > Fails in latest: https://fiddle.clickhouse.com/b59374e2-0169-4417-8810-6899cd8fcebd This works now, probably fixed by https://github.com/ClickHouse/ClickHouse/pull/73682. @markandrus Can you confirm?

MongoDB [added another opcode `OP_MSG` in version 3.6](https://docs.mongodb.com/manual/reference/mongodb-wire-protocol/#request-opcodes). Since it seems it's [already used in the wild](https://discuss.elastic.co/t/packetbeat-and-mongodb-4/146302) it would make sense to support it as well if we can. We...

@pohzipohzi Looking at the [MongoDB documentation](https://docs.mongodb.com/manual/reference/mongodb-wire-protocol/#request-opcodes) it looks like the "new" `OP_MSG` has a value of `2013`, so I suspect you could just add logic for that?

Also here: https://discuss.elastic.co/t/how-to-do-sniff-data-from-all-connected-network-in-windows-packetbeat/146734?u=cwurm