I found zeek are missing request bodies in my testing setup.
Could you please help with it?
I am testing with one testing client, one testing server and one zeek server.
Zeek server runs version 3.0.0 with pfring and 8 workers.
For example, if I send 10000 testing requests, zeek can get 10000 records.
But, around 100 records do not have request bodies. And the request body length is 0.
I run tcpdump against the mirroring interface.
The request bodies are in the tcpdump logs. Also I can see the content_length is 28 which matches my testing requests.