I've notice that for example, tcpdump, urlsnarf, sslstrip, they do not seem to stay enabled once I leave the view I'm in.
For example if I "start" any one of these from the widget windows they say "running" but then if I go into it full screen they are not running and turned off. If I start it from the full screen then go back to the dashboard; they show as not running. Do they only capture when you are focused on it in full screen? I want to start all three of them, and then go look at the Karma logs to see who's connecting. Do they shut off when you leave the view? Or are they running and it's just a UI issue? As I don't see any data when I go back or history logs.