fpc
fpc copied to clipboard
unprocessed pcaps cause moloch-capture start failures
Any ideas on why it is when pcaps are collected and sitting in the indexer host /data/pcap folder yet to be processed and a restart of container or host occurs, startup then fails with the moloch_capture in the fpc-moloch container?
To get all working again I must:
- stop sensor containers.
- clear all the pcaps out of the indexer hosts' /data/pcap folder
- restart fpc-moloch container on the indexer host.
Thanks!