Security

Monitor TCP port 80 in a PC (HOME)

a1697115
New Member

I am new to Splunk and I am going to create data input of monitoring TCP packet to/from my laptop

I have already installed Splunk enterprise and followed the instruction for monitoring the TCP port. I could create monitor data input but when I search nothing is captured?

I have already generated this data in snort and now want to do the same thing in Splunk but it fails?

Shall I need to install something further? or need to do a special configuration.

I really lost in lots of documentation in Splunk and not sure how to solve this simple problem

I appreciated any help

Regards,

Zeynab

Labels (1)
0 Karma

aasabatini
Motivator

Hi @a1697115 

i understand you need to monitor  the traffic packets  on your  port 80 right?

in that case you need to configure this app, splunk app for stream

https://splunkbase.splunk.com/app/1809/

The Splunk App for Stream with the Add-on for Stream Forwarder and Add-on for Stream Wire Data actively or passively capture packets, dynamically detect applications, parse protocols, and send metadata back to your Splunk environment for over 30 protocols and 300 commercial applications.

if this help confirmation solution or karma point is appreciated

Alessandro

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2023 Splunk Career Impact Report

We’ve been shouting it from the rooftops! The findings from the 2023 Splunk Career Impact Report showing that ...

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...