You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@drill.apache.org by "Charles Givre (Jira)" <ji...@apache.org> on 2019/10/10 15:07:00 UTC

[jira] [Created] (DRILL-7400) Add Packet Decoders with Interface to Drill

Charles Givre created DRILL-7400:
------------------------------------

             Summary: Add Packet Decoders with Interface to Drill
                 Key: DRILL-7400
                 URL: https://issues.apache.org/jira/browse/DRILL-7400
             Project: Apache Drill
          Issue Type: Improvement
          Components: Storage - Other
    Affects Versions: 1.18.0
            Reporter: Charles Givre
            Assignee: Charles Givre


Currently Drill's PCAP plugin reads the binary packet data and outputs this as a string in the data column. While this is somewhat helpful, it would be considerably more useful to parse the actual packet (when possible) and map the fields to Drill vectors.  Doing so would enable users to query the actual packet contents much more effectively and it would dramatically increase Drill's usefulness for network forensics.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)