On 21/03/17 at 13:21, Joaquín Silva wrote: > But i'm not receiving any body. This is an smtp output example: > > What I'm doing wrong? > My suricata version is 3.2.1 How do you run suricata? Can you share a pcap file so we can test wit that as well? -- Andreas Herz