On 25 Oct 2017, at 6:06, Rober Fernández wrote: > when I try to capture the connection data, my origin data is not captured. > In wireshark it works. What is the problem? some kind of bro configuration? How are you declaring that you want to capture contents? .Seth -- Seth Hall * Corelight, Inc * www.corelight.com