You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Michael Miklavcic (JIRA)" <ji...@apache.org> on 2016/06/16 20:16:05 UTC

[jira] [Updated] (METRON-235) Expose filtering capability for PCAP via CLI tool

     [ https://issues.apache.org/jira/browse/METRON-235?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Miklavcic updated METRON-235:
-------------------------------------
    Summary: Expose filtering capability for PCAP via CLI tool  (was: CLONE - Expose query filtering capability for PCAP via Metron REST API )

> Expose filtering capability for PCAP via CLI tool
> -------------------------------------------------
>
>                 Key: METRON-235
>                 URL: https://issues.apache.org/jira/browse/METRON-235
>             Project: Metron
>          Issue Type: Improvement
>            Reporter: Michael Miklavcic
>
> Query filtering capabilities were recently added to metron-common and used as part of the threat triage infrastructure.  This Jira tracks enhancing the PCAP query functionality in the REST API to expose filtering the packet data using this new query language.  The existing ability to filter by src/dest ip/port was not removed.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)