Greg Becker

[citrix1.pcap.txt](https://github.com/splunk/splunk-connect-for-syslog/files/9143268/citrix1.pcap.txt)

Just checking on this issue. Any updates or anything additional needed from me?

Hello @mateuszpierzchala-splunk - any updates on this one by chance? Thx!!

Hello! Can you please suggest an appropriate command for gathering a pcap that you can use? Or point me to any docs that already describe what's needed?

My apologies for the delayed response. This can be closed. The issue was with Citrix sending, not with Splunk parsing. Appreciate your time and review.