That's all about libnids. If you read libnids docs carefuly, you'll find that it reconstructs a TCP session only if it catched the start of the TCP connection and if the connection was closed properly.
In the other words it is nesessary for dsniff to be on a job when you start sniffing. -- does not show any fetched data https://bugs.launchpad.net/bugs/120867 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs