# Why everytime I run packetbeat and I open kibana to see the indexed pcap data the number of hits of the same pcap file keep changing?

**URL:** <https://discuss.elastic.co/t/why-everytime-i-run-packetbeat-and-i-open-kibana-to-see-the-indexed-pcap-data-the-number-of-hits-of-the-same-pcap-file-keep-changing/81530>\
**Category:** Beats\
**Created:** [April 6, 2017, 8:10pm UTC](https://discuss.elastic.co/t/why-everytime-i-run-packetbeat-and-i-open-kibana-to-see-the-indexed-pcap-data-the-number-of-hits-of-the-same-pcap-file-keep-changing/81530 "2017-04-06T20:10:47Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [April 7, 2017, 4:48pm UTC](https://discuss.elastic.co/t/why-everytime-i-run-packetbeat-and-i-open-kibana-to-see-the-indexed-pcap-data-the-number-of-hits-of-the-same-pcap-file-keep-changing/81530/4 "2017-04-07T16:48:39Z")

</div>

This discussion pretty much explains whats going on: [Why packetbeat generates result of "libbeat.publisher.published\_events" changing every time](https://discuss.elastic.co/t/why-packetbeat-generates-result-of-libbeat-publisher-published-events-changing-every-time/71699)

The last 2 posts do contain some follow-up github tickets improving on the pcap-reading use-case.

---

_[View the full topic](https://discuss.elastic.co/t/why-everytime-i-run-packetbeat-and-i-open-kibana-to-see-the-indexed-pcap-data-the-number-of-hits-of-the-same-pcap-file-keep-changing/81530)._