You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Michael Miklavcic (JIRA)" <ji...@apache.org> on 2016/06/16 20:15:05 UTC

[jira] [Created] (METRON-235) CLONE - Expose query filtering capability for PCAP via Metron REST API

Michael Miklavcic created METRON-235:
----------------------------------------

             Summary: CLONE - Expose query filtering capability for PCAP via Metron REST API 
                 Key: METRON-235
                 URL: https://issues.apache.org/jira/browse/METRON-235
             Project: Metron
          Issue Type: Improvement
            Reporter: Michael Miklavcic


Query filtering capabilities were recently added to metron-common and used as part of the threat triage infrastructure.  This Jira tracks enhancing the PCAP query functionality in the REST API to expose filtering the packet data using this new query language.  The existing ability to filter by src/dest ip/port was not removed.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)