# Reading paps offline continuously with Seek 3.2.2

**URL:** <https://community.zeek.org/t/reading-paps-offline-continuously-with-seek-3-2-2/6258>\
**Category:** Zeek\
**Created:** [October 27, 2020, 11:43am UTC](https://community.zeek.org/t/reading-paps-offline-continuously-with-seek-3-2-2/6258 "2020-10-27T11:43:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![clopmz](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@clopmz](https://community.zeek.org/u/clopmz)\
**Post date:** [October 27, 2020, 11:43am UTC](https://community.zeek.org/t/reading-paps-offline-continuously-with-seek-3-2-2/6258/1 "2020-10-27T11:43:13Z")

</div>

Hi all,

Is it possible to read and process a pcap’s dir offline with Zeek version 3.2.2? Exists some option to analyze a pcap’s dir with several pcaps stored?

---

<div class="post-metadata">

**Author:** ![Federico\_Foschini](https://avatars.discourse-cdn.com/v4/letter/f/b9bd4f/32.png) [@Federico\_Foschini](https://community.zeek.org/u/Federico_Foschini)\
**Post date:** [October 27, 2020, 11:56am UTC](https://community.zeek.org/t/reading-paps-offline-continuously-with-seek-3-2-2/6258/2 "2020-10-27T11:56:03Z")

</div>

The easier way I came up with is by doing a bash script that iteratively runs zeek on every pcap and copy the log files to another destination to avoid overwriting.

---

<div class="post-metadata">

**Author:** ![qing\_wang](https://avatars.discourse-cdn.com/v4/letter/q/ba8739/32.png) [@qing\_wang](https://community.zeek.org/u/qing_wang)\
**Post date:** [October 28, 2020, 2:02am UTC](https://community.zeek.org/t/reading-paps-offline-continuously-with-seek-3-2-2/6258/3 "2020-10-28T02:02:32Z")

</div>

We are dealing with traffic in real time.Pcap packages are not saved. Copying log files is fine, but I want the child nodes to share the traffic

Federico Foschini \<[undicizeri@gmail.com](mailto:undicizeri@gmail.com)\> 于2020年10月27日周二 下午7:56写道：

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:47pm UTC](https://community.zeek.org/t/reading-paps-offline-continuously-with-seek-3-2-2/6258/4 "2022-05-06T15:47:29Z")

</div>

Closed on May 6, 2022, 3:47pm UTC