{"action":"opened","issue":{"url":"https://api.github.com/repos/aol/moloch/issues/777","repository_url":"https://api.github.com/repos/aol/moloch","labels_url":"https://api.github.com/repos/aol/moloch/issues/777/labels{/name}","comments_url":"https://api.github.com/repos/aol/moloch/issues/777/comments","events_url":"https://api.github.com/repos/aol/moloch/issues/777/events","html_url":"https://github.com/aol/moloch/issues/777","id":276844871,"number":777,"title":"Moloch not flushing data into PCAP","user":{"login":"grantcurell","id":1595564,"avatar_url":"https://avatars2.githubusercontent.com/u/1595564?v=4","gravatar_id":"","url":"https://api.github.com/users/grantcurell","html_url":"https://github.com/grantcurell","followers_url":"https://api.github.com/users/grantcurell/followers","following_url":"https://api.github.com/users/grantcurell/following{/other_user}","gists_url":"https://api.github.com/users/grantcurell/gists{/gist_id}","starred_url":"https://api.github.com/users/grantcurell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grantcurell/subscriptions","organizations_url":"https://api.github.com/users/grantcurell/orgs","repos_url":"https://api.github.com/users/grantcurell/repos","events_url":"https://api.github.com/users/grantcurell/events{/privacy}","received_events_url":"https://api.github.com/users/grantcurell/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-11-26T18:21:17Z","updated_at":"2017-11-26T18:21:17Z","closed_at":null,"author_association":"NONE","body":"<!-- For bugs or support questions please provide -->\r\n**Elasticsearch version**: 5.6.4\r\n\r\n**Moloch version**: v0.20.2-GIT\r\n\r\n**OS name and version**: Red Hat 7.4\r\n\r\n**How was Moloch built/installed:** singlehost built\r\n\r\n[capture_log.txt](https://github.com/aol/moloch/files/1504119/capture_log.txt)\r\n\r\nI built Moloch with DAG support and am running it on an Endace DAG. One of the issues I am now having is that everything works, except Moloch isn't flushing to disk when I run it as a service. Moloch generates the PCAP, but it remains empty. If I run molochcapture on its own and then hit ctrl+C, it terminates and properly flushes data to disk. I've looked through the config file and searched around for settings that would allow me to control this. \r\n\r\n**Desired Behavior:** The behavior I want is that it uses the memory buffer unless a timer is reached. For example: Write when memory buffer is full OR every 30 seconds, whichever comes first.\r\n\r\n"}}
{"actor":{"display_login":"grantcurell"}}