The default directory for Passive Capture log files is /var/log/tealeaf. When you install the tealeaf-pca package for the first time on a computer, it creates and uses /var/log/tealeaf.

If you are upgrading from an earlier version and the /usr/local/ctccap/logs directory is a nonempty directory, then Passive Capture continues to use that directory instead of /var/log/tealeaf.

The Web Console Backup/Logs page is updated to display the log file directory in use.