Charles Givre created DRILL-7400:
------------------------------------
Summary: Add Packet Decoders with Interface to Drill
Key: DRILL-7400
URL: https://issues.apache.org/jira/browse/DRILL-7400
Project: Apache Drill
Issue Type: Improvement
Components: Storage - Other
Affects Versions: 1.18.0
Reporter: Charles Givre
Assignee: Charles Givre
Currently Drill's PCAP plugin reads the binary packet data and outputs this as
a string in the data column. While this is somewhat helpful, it would be
considerably more useful to parse the actual packet (when possible) and map the
fields to Drill vectors. Doing so would enable users to query the actual
packet contents much more effectively and it would dramatically increase
Drill's usefulness for network forensics.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)