Vitalii Diravka created DRILL-7852:
--------------------------------------
Summary: Handle PCAP/PCAPNG Better
Key: DRILL-7852
URL: https://issues.apache.org/jira/browse/DRILL-7852
Project: Apache Drill
Issue Type: New Feature
Affects Versions: 1.13.0
Reporter: Vlad
Assignee: Vlad
Fix For: 1.15.0
The _PCAP Next Generation Dump File Format_ (or pcapng for short) [1] is an
attempt to overcome the limitations of the currently widely used (but limited)
libpcap format.
At a first level, it is desirable to query and filter by source and destination
IP and port, and src/dest mac addreses or by protocol. Beyond that, however, it
would be very useful to be able to group packets by TCP session and eventually
to look at packet contents.
Initial work is available at
https://github.com/mapr-demos/drill/tree/pcapng_dev
[1] https://pcapng.github.io/pcapng/
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
