# weird: spontaneous\_FIN problem for HTTP log **URL:** \ **Category:** Zeek\ **Created:** [December 23, 2010, 8:12am UTC](https://community.zeek.org/t/weird-spontaneous-fin-problem-for-http-log/1772 "2010-12-23T08:12:05Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![\_Zhen\_Ma](https://avatars.discourse-cdn.com/v4/letter/_/96bed5/32.png) [@\_Zhen\_Ma](https://community.zeek.org/u/_Zhen_Ma)\ **Post date:** [December 23, 2010, 8:12am UTC](https://community.zeek.org/t/weird-spontaneous-fin-problem-for-http-log/1772/1 "2010-12-23T08:12:05Z")
Hi! ---
**Author:** ![Vern](https://yyz1.discourse-cdn.com/flex011/user_avatar/community.zeek.org/vern/32/630_2.png) [@Vern](https://community.zeek.org/u/Vern)\ **Post date:** [December 23, 2010, 5:06pm UTC](https://community.zeek.org/t/weird-spontaneous-fin-problem-for-http-log/1772/2 "2010-12-23T17:06:15Z")
> My command is "bro -r XXX.trace http-reply http-header". I can get log file > if I use "bro -r XXX.trace mt", but the output log file is not http > information and is not what I want. Are you sure the trace has packet payloads? The other question is whether it's unidirectional, as above\_hole\_data\_without\_any\_acks indicates the analyzer is only seeing one side of a connection (or is processing a trace with heavy measurement loss). If the above aren't the problem, then please send a snippet to me (or the list) so we can see about reproducing what's going on.     Vern ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:39pm UTC](https://community.zeek.org/t/weird-spontaneous-fin-problem-for-http-log/1772/3 "2022-05-06T15:39:22Z")