# Suricata Pcap options

**URL:** <https://forum.suricata.io/t/suricata-pcap-options/2070>\
**Category:** Developers\
**Created:** [January 4, 2022, 9:33am UTC](https://forum.suricata.io/t/suricata-pcap-options/2070 "2022-01-04T09:33:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![zakaria\_zakaria](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/zakaria_zakaria/32/1188_2.png) [@zakaria\_zakaria](https://forum.suricata.io/u/zakaria_zakaria)\
**Post date:** [January 4, 2022, 9:33am UTC](https://forum.suricata.io/t/suricata-pcap-options/2070/1 "2022-01-04T09:33:19Z")

</div>

Dear all, i have a question regarding the traffic options allowed by suricata. what is the difference between options Full and default. I captured some traffic withe the two options but i didn’t notice any difference. for both I can find the printable payload after TLS negociation even if it’s said that with the Defeult option suricata doesn’t capture traffic after TLS profiling. And another question, does anyone have an idea about the Max Size for the pcap-log file ? many thanks

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [January 26, 2022, 10:30pm UTC](https://forum.suricata.io/t/suricata-pcap-options/2070/2 "2022-01-26T22:30:53Z")

</div>

What part of the config are you talking about exactly?