# \#pcap

**URL:** https://community.zeek.org/tag/pcap/76.md

[Latest](https://community.zeek.org/latest.md) · [Categories](https://community.zeek.org/categories.md) · [Tags](https://community.zeek.org/tags.md)

---

## [Missing http events with zeek](https://community.zeek.org/t/missing-http-events-with-zeek/7669)

<div class="topic-metadata">

**Author:** [@apw](https://community.zeek.org/u/apw)\
**Replies:** 5\
**Last updated:** [December 16, 2024, 4:18pm UTC](https://community.zeek.org/t/missing-http-events-with-zeek/7669 "2024-12-16T16:18:44Z")

</div>

Hello! I’m trying to set up Zeek to get HTTP data from the network interface, but I’m getting fewer HTTP events than I expected. So I recorded a pcap file and tried to feed it to zeek directly and to tshark - and it lo…

---

## [Zeek and tcpdump packet mismatch](https://community.zeek.org/t/zeek-and-tcpdump-packet-mismatch/7179)

<div class="topic-metadata">

**Author:** [@biswa61](https://community.zeek.org/u/biswa61)\
**Replies:** 5\
**Last updated:** [December 25, 2023, 4:40pm UTC](https://community.zeek.org/t/zeek-and-tcpdump-packet-mismatch/7179 "2023-12-25T16:40:01Z")

</div>

Hi, I am facing an issue while running zeek on an interface and writing it to a file. The almost same issue I am getting in case of tcpdump as well. tcpdump is showing 10000 packets received but when I am trying to writ…

---

## [Remote Packet Forwarding to Zeek Workers](https://community.zeek.org/t/remote-packet-forwarding-to-zeek-workers/6677)

<div class="topic-metadata">

**Author:** [@BrandonT](https://community.zeek.org/u/BrandonT)\
**Replies:** 5\
**Last updated:** [September 29, 2022, 7:45am UTC](https://community.zeek.org/t/remote-packet-forwarding-to-zeek-workers/6677 "2022-09-29T07:45:18Z")

</div>

Hi all, I just started working with Zeek. I have been tasked with creating a way for full packet data to be pushed to our Zeek cluster for analysis and processing on a central server, but to have the agents/nodes only r…

---

## [Analysing a pcap using zeek](https://community.zeek.org/t/analysing-a-pcap-using-zeek/6643)

<div class="topic-metadata">

**Author:** [@prajwalShavi](https://community.zeek.org/u/prajwalShavi)\
**Replies:** 1\
**Last updated:** [August 13, 2022, 10:53pm UTC](https://community.zeek.org/t/analysing-a-pcap-using-zeek/6643 "2022-08-13T22:53:33Z")

</div>

Hello! I am trying to analyze a pcap file in which I want to retrieve all the source IP and destination IP and also want to add two fields which says that the source IP and destination IP belongs to which class. I’m ab…