anchor.diff:  ----------------------------------------------------------------------
   
   [[win]]
  -==== win:
  +*win:*
   
   . Download and install WinPcap from this
   http://www.winpcap.org/install/default.htm[page]. WinPcap is a library that uses
  
positive.code: The recommended template file is installed by the Packetbeat packages. Load it with the
  following command:
  
  ==== deb or rpm:
  
  [source,shell]
  ----------------------------------------------------------------------
  curl -XPUT 'http://localhost:9200/_template/packetbeat' -d@/etc/packetbeat/packetbeat.template.json
  ----------------------------------------------------------------------
  
  ==== mac:
  
  [source,shell]
  ----------------------------------------------------------------------
  
negative.code: ----------------------------------------------------------------------
  
  [[mac]]
  *mac:*
  
  ["source","sh",subs="attributes,callouts"]
  ----------------------------------------------------------------------
  