Monitor TCP port 80 in a PC (HOME)

[a1697115]

I am new to Splunk and I am going to create data input of monitoring TCP packet to/from my laptop

I have already installed Splunk enterprise and followed the instruction for monitoring the TCP port. I could create monitor data input but when I search nothing is captured?

I have already generated this data in snort and now want to do the same thing in Splunk but it fails?

Shall I need to install something further? or need to do a special configuration.

I really lost in lots of documentation in Splunk and not sure how to solve this simple problem

I appreciated any help

Regards,

Zeynab

[aasabatini]

Hi @a1697115 

i understand you need to monitor  the traffic packets  on your  port 80 right?

in that case you need to configure this app, splunk app for stream

https://splunkbase.splunk.com/app/1809/

The Splunk App for Stream with the Add-on for Stream Forwarder and Add-on for Stream Wire Data actively or passively capture packets, dynamically detect applications, parse protocols, and send metadata back to your Splunk environment for over 30 protocols and 300 commercial applications.

if this help confirmation solution or karma point is appreciated

Alessandro