[jira] [Commented] (METRON-155) Expose query filtering capability for PCAP via Metron REST API

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/METRON-155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15290875#comment-15290875 ] 

ASF GitHub Bot commented on METRON-155:
---------------------------------------

Github user dlyle65535 commented on the pull request:

    https://github.com/apache/incubator-metron/pull/119#issuecomment-220288506
  
    +1 worked in EC2.


> Expose query filtering capability for PCAP via Metron REST API 
> ---------------------------------------------------------------
>
>                 Key: METRON-155
>                 URL: https://issues.apache.org/jira/browse/METRON-155
>             Project: Metron
>          Issue Type: Improvement
>            Reporter: Casey Stella
>
> Query filtering capabilities were recently added to metron-common and used as part of the threat triage infrastructure.  This Jira tracks enhancing the PCAP query functionality in the REST API to expose filtering the packet data using this new query language.  The existing ability to filter by src/dest ip/port was not removed.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)