question

AljevMMagana-7383 avatar image
0 Votes"
AljevMMagana-7383 asked PRADEEPCHEEKATLA-MSFT edited

How do we packet capture on Event Hub and monitor IP address that sends request/message

We have an event hub setup and we would like to monitor incoming packets and IP address that sends request/message

azure-monitorazure-event-hubs
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

PRADEEPCHEEKATLA-MSFT avatar image
0 Votes"
PRADEEPCHEEKATLA-MSFT answered PRADEEPCHEEKATLA-MSFT edited

Hello @AljevMMagana-7383,

Welcome to the Microsoft Q&A platform.

Currently, it's not possible to determine the source IP of an individual message or event.

Virtual network logs are generated only if the namespace allows access from specific IP addresses (IP filter rules). If you don't want to restrict access to your namespace using these features and still want to get virtual network logs to track IP addresses of clients connecting to the Event Hubs namespace, you could use the following workaround: Enable IP filtering, and add the total addressable IPv4 range (1.0.0.0/1 - 255.0.0.0/1). Event Hubs doesn't support IPv6 address ranges.

For more details, refer to What client IPs are sending events to or receiving events from my namespace? and Record network packets.

Hope this helps. Do let us know if you any further queries.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @AljevMMagana-7383,

Just checking in to see if the above answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

0 Votes 0 ·

Hello @AljevMMagana-7383,

Following up to see if the above suggestion was helpful. And, if you have any further query do let us know.

0 Votes 0 ·

Hi @PRADEEPCHEEKATLA-MSFT Appreciate the response, we could use this option above you provided. Thank you.

1 Vote 1 ·
Show more comments