0 Packet Capture: What if Less Is More? Smart packet capture (PCAP) gives analysts the ability to choose the packet evidence they collect and make it retrievable via SIEM.