Hi guys,
Does anybody know why there are IDS events without a pcap?
It happens, that there are identical events, but one with pcap and one without?
As far as i understand, you dont have to explicit turn on those captures (also i did not find something like a checkbox to do it....) for IDS events and now i would like to know how i get always pcaps to the events, because without a analysis is not possible.
Many Thanks in advance!