Can I save the pacp file processed by SURICATA, such as a pacp file containing the Htttp protocol? I want to save and process the http file and output the pacp file. thank you
In 7.0 you will also have conditional logging of pcaps, but for now you can use the pcap log, see 10.1. Suricata.yaml — Suricata 6.0.8 documentation
Thank you for your reply