There are no app layers detected, but at least tcp and upd. Do you have a stats.log with version 6 to compare with?
Could you add to the eve json log the flow as type so that we could see if the flow itself was seen at least?
There are no app layers detected, but at least tcp and upd. Do you have a stats.log with version 6 to compare with?
Could you add to the eve json log the flow as type so that we could see if the flow itself was seen at least?