I know that i can run bro -i eth0 -w .pcap . Is there a way broctl to also write to pcap file? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170315/538b29c4/attachment.html