You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@drill.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2018/08/17 10:15:00 UTC

[jira] [Commented] (DRILL-6179) Added pcapng-format support

    [ https://issues.apache.org/jira/browse/DRILL-6179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16583738#comment-16583738 ] 

ASF GitHub Bot commented on DRILL-6179:
---------------------------------------

arina-ielchiieva commented on issue #1126: DRILL-6179: Added pcapng-format support
URL: https://github.com/apache/drill/pull/1126#issuecomment-413821845
 
 
   @Vlad-Storona could you please rebase?
   @paul-rogers could you please do final review? Unfortunately, this did not make it into 1.14 but I guess we should consider not missing 1.15.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Added pcapng-format support
> ---------------------------
>
>                 Key: DRILL-6179
>                 URL: https://issues.apache.org/jira/browse/DRILL-6179
>             Project: Apache Drill
>          Issue Type: New Feature
>    Affects Versions: 1.13.0
>            Reporter: Vlad
>            Assignee: Vlad
>            Priority: Major
>              Labels: doc-impacting
>             Fix For: 1.15.0
>
>
> The _PCAP Next Generation Dump File Format_ (or pcapng for short) [1] is an attempt to overcome the limitations of the currently widely used (but limited) libpcap format.
> At a first level, it is desirable to query and filter by source and destination IP and port, and src/dest mac addreses or by protocol. Beyond that, however, it would be very useful to be able to group packets by TCP session and eventually to look at packet contents.
> Initial work is available at  https://github.com/mapr-demos/drill/tree/pcapng_dev
> [1] https://pcapng.github.io/pcapng/
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)