# Missing request body

**URL:** <https://community.zeek.org/t/missing-request-body/5971>\
**Category:** Zeek\
**Created:** [January 16, 2020, 11:33pm UTC](https://community.zeek.org/t/missing-request-body/5971 "2020-01-16T23:33:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yi\_Zhu](https://avatars.discourse-cdn.com/v4/letter/y/8edcca/32.png) [@Yi\_Zhu](https://community.zeek.org/u/Yi_Zhu)\
**Post date:** [January 16, 2020, 11:33pm UTC](https://community.zeek.org/t/missing-request-body/5971/1 "2020-01-16T23:33:30Z")

</div>

Hi,

I found zeek are missing request bodies in my testing setup.  
Could you please help with it?

I am testing with one testing client, one testing server and one zeek server.  
Zeek server runs version 3.0.0 with pfring and 8 workers.  
For example, if I send 10000 testing requests, zeek can get 10000 records.  
But, around 100 records do not have request bodies. And the request body length is 0.  
I run tcpdump against the mirroring interface.  
The request bodies are in the tcpdump logs. Also I can see the content\_length is 28 which matches my testing requests.

Thanks,  
Yi

---

<div class="post-metadata">

**Author:** ![JustinAzoff](https://avatars.discourse-cdn.com/v4/letter/j/13edae/32.png) [@JustinAzoff](https://community.zeek.org/u/JustinAzoff)\
**Post date:** [January 17, 2020, 2:12pm UTC](https://community.zeek.org/t/missing-request-body/5971/2 "2020-01-17T14:12:14Z")

</div>

What do the corresponding conn.log records for these connections look like?

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/missing-request-body/5971/3 "2022-05-06T15:47:00Z")

</div>