Noticed this while running zeekctl
Ran the capstats command with this result:
[ZeekControl] > capstats
Interface kpps mbps (10s average)
If you’re using that setcap plugin you also need to run setcap on …/bin/capstats
Justin,
Thank you. That was the issue.