# Bro - File Extraction **URL:** \ **Category:** Zeek\ **Created:** [May 11, 2016, 8:41am UTC](https://community.zeek.org/t/bro-file-extraction/4149 "2016-05-11T08:41:01Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Mehmet\_LEBLEBICI](https://avatars.discourse-cdn.com/v4/letter/m/49beb7/32.png) [@Mehmet\_LEBLEBICI](https://community.zeek.org/u/Mehmet_LEBLEBICI)\ **Post date:** [May 11, 2016, 8:41am UTC](https://community.zeek.org/t/bro-file-extraction/4149/1 "2016-05-11T08:41:01Z")
Hello all, I am using Bro 2.4.1 and want to extract files seen on the network traffic. For this i loaded extract-all-files.bro script in local.bro. However, it does not completely extract files. It seems it stops extracting after some point. This occurs for all file types. I looked at the files.log file and see that total\_bytes and seen\_bytes fields are not same. I also checked extract file size limit and there is no problem with that. Also, when i save the traffic into a pcap file and issue bro -Cr pcapFile.pcap …/extract-all-files.bro, it extracts files successfully. However, it cannot do so in current/logs/extractFiles directory. I am kind of new to Bro and i am stuck with this problem for about a week. So, any help will be appreciated. Thanks in advance, Mehmet Leblebici ---
**Author:** ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)\ **Post date:** [May 17, 2016, 4:57pm UTC](https://community.zeek.org/t/bro-file-extraction/4149/2 "2016-05-17T16:57:51Z")
Hello Mehmet, this sounds a bit like you encountered packet loss and Bro might not have seen all the data packets, either due to network problems, or because the CPU was overutilized during life capture. Did you take a look at the missing\_bytes field in files.log and if this is greater than 0? Johanna ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/bro-file-extraction/4149/3 "2022-05-06T15:43:40Z")