elastic
[8.19](backport #44965) Optionally ignore MAC address in flow matching in Packetbeat
Proposed commit message
This adds a new configuration field under flows allow_mismatched_eth which if set to true, will not add the MAC address to the flowId. This allows correlating packets that for one reason or another end up with a differing return route. E.g. a DNS response is returned on a different interface or from a different source than the request was sent on/to.
This change is to support the enhancement request
Checklist
- [x] My code follows the style guidelines of this project
- [x] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
- [x] I have made corresponding change to the default configuration files
- [ ] I have added tests that prove my fix is effective or that my feature works
- [x] I have added an entry in
CHANGELOG.next.asciidocorCHANGELOG-developer.next.asciidoc.
Disruptive User Impact
There should be none, as this is a default false configuration, so unless the field is added no behaviour in packetbeat changes.
This is an automatic backport of pull request #44965 done by [Mergify](https://mergify.com).
![mergify[bot] avatar](https://avatars.githubusercontent.com/in/10562?v=4 "Published by a pub.dev verified publisher"){kind=small}
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏
This pull request is now in conflicts. Could you fix it? 🙏 To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/
git fetch upstream
git checkout -b mergify/bp/8.19/pr-44965 upstream/mergify/bp/8.19/pr-44965
git merge upstream/8.19
git push upstream mergify/bp/8.19/pr-44965
This pull request has not been merged yet. Could you please review and merge it @Tacklebox? 🙏