On 27/02/17 at 17:24, Charles Devoe wrote: > We are capturing the stream hex data for our alerts. In many of the Alerts we get truncated data It would be helpful if you could send us more infos about your setup, suricata version and the best would be if you can create a reproducible case which helps debugging. -- Andreas Herz