I am running tcp and http evasion attacks using a framework that generates random attacks. I enabled http.log and fast.log I am using my rules with alert when I run those attacks .My http.log is created and contain informations but my fast.log is not created.