---
title: Enabling packet capture on Linux
description: Enabling packet capture on Linux
---

[Skip to content](https://support.block64.com/enabling-packet-capture-on-linux#main-content)

<https://support.block64.com/kb-tickets/new?hsLang=en> [Customer Portal](https://customerportal.block64.com/tickets-view?hsLang=en)

[![Logo - dark](https://support.block64.com/hs-fs/hubfs/Logo%20-%20dark.png?width=350&height=86&name=Logo%20-%20dark.png)](https://support.block64.com/?hsLang=en)

- [Home](https://support.block64.com/)
- [Insights Portal](https://insights.block64.com/login)
- Platform
  
  Show submenu for Platform

    - [Block 64](https://www.block64.com/)
    - [Why Block 64?](https://www.block64.com/#:~:text=What%20makes%2CBlock%2064%20different)
- Solutions
  
  Show submenu for Solutions

    - [Unified Visibility](https://www.block64.com/solutions/unified-visibility)
    - [Cost Optimization](https://www.block64.com/solutions/cost-optimization)
    - [Proactive Security](https://www.block64.com/solutions/proactive-security)
    - [Compliance](https://www.block64.com/solutions/continuous-compliance)
- Learn
  
  Show submenu for Learn

    - [Quick Start Guides](https://support.block64.com/getting-started)
    - [Integrations](https://support.block64.com/documentation#integrations)
    - [Blog](https://www.block64.com/blog)
- Support
  
  Show submenu for Support

    - [Trust Center](https://trust.block64.com/)
    - [Service Health](https://status.block64.com/)
    - [Partners](https://www.block64.com/partners)
    - [Contact Us](https://www.block64.com/contact)
- [Pricing](https://www.block64.com/pricing)
- [Get Started Free](https://www.block64.com/free-trial)

Open main navigation

Close main navigation

- [Home](https://support.block64.com/)
- [Insights Portal](https://insights.block64.com/login)
- Platform
  
  Show submenu for Platform

    - [Block 64](https://www.block64.com/)
    - [Why Block 64?](https://www.block64.com/#:~:text=What%20makes%2CBlock%2064%20different)
- Solutions
  
  Show submenu for Solutions

    - [Unified Visibility](https://www.block64.com/solutions/unified-visibility)
    - [Cost Optimization](https://www.block64.com/solutions/cost-optimization)
    - [Proactive Security](https://www.block64.com/solutions/proactive-security)
    - [Compliance](https://www.block64.com/solutions/continuous-compliance)
- Learn
  
  Show submenu for Learn

    - [Quick Start Guides](https://support.block64.com/getting-started)
    - [Integrations](https://support.block64.com/documentation#integrations)
    - [Blog](https://www.block64.com/blog)
- Support
  
  Show submenu for Support

    - [Trust Center](https://trust.block64.com/)
    - [Service Health](https://status.block64.com/)
    - [Partners](https://www.block64.com/partners)
    - [Contact Us](https://www.block64.com/contact)
- [Pricing](https://www.block64.com/pricing)
- [Get Started Free](https://www.block64.com/free-trial)
- <https://support.block64.com/kb-tickets/new>
- [Customer Portal](https://customerportal.block64.com/tickets-view)
- [Submit a Support Request](https://support.block64.com/kb-tickets/new)

[Submit a Support Request](https://support.block64.com/kb-tickets/new?hsLang=en)

 How can we assist you today?

- There are no suggestions because the search field is empty.

1. [Block 64 Support Center](https://support.block64.com/?hsLang=en)
2. [Troubleshooting](https://support.block64.com/troubleshooting?hsLang=en)
3. [Discovery: Block 64 Application](https://support.block64.com/troubleshooting?hsLang=en#discovery-block-64-application)

# Enabling packet capture on Linux

 

The Block 64 application and BlockBox appliance are equipped to capture network data for dependency mapping. While most Linux distributions function without additional setup, some may need further configuration. The Linux traffic monitor utilizes the AF\_PACKET socket for packet capture. On certain distributions, the af\_packet module might not be loaded at startup.

To check if this is the case, you can execute the following command on most Linux distributions, as they contain the configuration parameters used to compile the kernel:

```
`grep -x 'CONFIG_PACKET=[ym]' "/boot/config-$(uname -r)"`
```

If CONFIG\_PACKET is compiled as a module but isn't loaded, you must ensure it loads at startup by following these steps:

1. Check that the module isn't loaded: `lsmod | grep -i af_packet` - there should be no match.
2. Create the configuration file: `echo "af_packet" > /etc/modules-load.d/af_packet.conf`
3. Reboot the system.
4. Confirm the module is now loaded: `lsmod | grep -i af_packet` - a match should appear.

- [Getting Started](https://support.block64.com/getting-started?hsLang=en#main-content)

    - [Free Trial Onboarding](https://support.block64.com/getting-started?hsLang=en#free-trial-onboarding)
    - [Start Your Subscription](https://support.block64.com/getting-started?hsLang=en#start-your-subscription)
    - [Discovery Application Installation](https://support.block64.com/getting-started?hsLang=en#discovery-application-installation)
    - [Discovery Appliance Setup](https://support.block64.com/getting-started?hsLang=en#discovery-appliance-setup)
    - [Discovery Agent Deployment](https://support.block64.com/getting-started?hsLang=en#discovery-agent-deployment)
- [Insights Reports](https://support.block64.com/insights-reports?hsLang=en#main-content)

    - [IT Asset Management](https://support.block64.com/insights-reports?hsLang=en#it-asset-management)
    - [Security](https://support.block64.com/insights-reports?hsLang=en#security)
    - [Cloud & Infrastructure](https://support.block64.com/insights-reports?hsLang=en#cloud-infrastructure)
    - [The Combine: User Guide](https://support.block64.com/insights-reports?hsLang=en#the-combine-user-guide)
- [Troubleshooting](https://support.block64.com/troubleshooting?hsLang=en#main-content)

    - [Discovery: General Knowledge](https://support.block64.com/troubleshooting?hsLang=en#discovery-general-knowledge)
    - [Discovery: Block 64 Application](https://support.block64.com/troubleshooting?hsLang=en#discovery-block-64-application)
    - [Discovery: BlockBox Appliance](https://support.block64.com/troubleshooting?hsLang=en#discovery-blockbox-appliance)
    - [Discovery: Discovery Agent](https://support.block64.com/troubleshooting?hsLang=en#discovery-discovery-agent)
    - [Insights Calculations](https://support.block64.com/troubleshooting?hsLang=en#insights-calculations)
- [Documentation](https://support.block64.com/documentation?hsLang=en#main-content)

    - [Discovery: General Knowledge](https://support.block64.com/documentation?hsLang=en#discovery-general-knowledge)
    - [Privacy and Security](https://support.block64.com/documentation?hsLang=en#privacy-and-security)
    - [Block 64 API](https://support.block64.com/documentation?hsLang=en#block-64-api)
    - [Integrations](https://support.block64.com/documentation?hsLang=en#integrations)
- [FAQs](https://support.block64.com/faqs?hsLang=en#main-content)

    - [Security](https://support.block64.com/faqs?hsLang=en#security)
    - [Block 64 Discovery](https://support.block64.com/faqs?hsLang=en#block-64-discovery)
- [New Features & Updates](https://support.block64.com/new-features-updates?hsLang=en#main-content)

    - [New Features & Updates](https://support.block64.com/new-features-updates?hsLang=en#new-features-updates)
    - [Combine](https://support.block64.com/new-features-updates?hsLang=en#combine)
    - [Block 64 Discovery](https://support.block64.com/new-features-updates?hsLang=en#block-64-discovery)
    - [Remote Discovery Agent](https://support.block64.com/new-features-updates?hsLang=en#remote-discovery-agent)
    - [Combine API](https://support.block64.com/new-features-updates?hsLang=en#combine-api)
    - [BlockBox Virtual Appliance](https://support.block64.com/new-features-updates?hsLang=en#blockbox-virtual-appliance)

[![Logomark - dark](https://support.block64.com/hs-fs/hubfs/Logomark%20-%20dark.png?width=60&height=96&name=Logomark%20-%20dark.png "Logomark - dark")](http://block64.com)

300 Geary Ave, Toronto, ON M6H 2C5, Canada  
+1 800-875-5260  
[www.block64.com](https://www.block64.com/)

<https://www.linkedin.com/company/block-64/> <https://www.reddit.com/r/Block64/> <https://www.youtube.com/@block64corp> <https://www.block64.com/contact>