https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216343#M1041512 <P>Sourcefire Questions:</P> <P>&nbsp;</P> <P>- How long do the events appear in the Intrusion-Events tab for you to be able to download the PCAP files? Is there a length of time these are visibile for or is there a limit on how many you can see/download?</P> <P>&nbsp;</P> <P>- Once you have downloaded the PCAP file, does it still remain within the Intrusion-Events window?</P> <P>&nbsp;</P> <P>Thanks</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 21 Feb 2020 14:45:03 GMT danlawrance1 2020-02-21T14:45:03Z https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216343#M1041512 <P>Sourcefire Questions:</P> <P>&nbsp;</P> <P>- How long do the events appear in the Intrusion-Events tab for you to be able to download the PCAP files? Is there a length of time these are visibile for or is there a limit on how many you can see/download?</P> <P>&nbsp;</P> <P>- Once you have downloaded the PCAP file, does it still remain within the Intrusion-Events window?</P> <P>&nbsp;</P> <P>Thanks</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 21 Feb 2020 14:45:03 GMT https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216343#M1041512 danlawrance1 2020-02-21T14:45:03Z https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216547#M1041514 Hi,<BR /><BR />I have intrusion events from 2016, so they rotate depending on your setting under System/Configuration/Database/ under "Intrusion Event Database" and how many events you are getting.<BR />The event will stay on the FMC after downloading it.<BR /><BR />br, Micke Tue, 14 Nov 2017 20:08:12 GMT https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216547#M1041514 mikael.lahtela 2017-11-14T20:08:12Z https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216908#M1041515 <P>Thankyou!&nbsp;</P> Wed, 15 Nov 2017 10:28:29 GMT https://community.cisco.com/t5/network-security/sourcefire-pcap/m-p/3216908#M1041515 danlawrance1 2017-11-15T10:28:29Z