Hi all, I would like to start a discussion on the possible ways to provide PCAP data for the full dev. The full dev VM after a rebuild contains no PCAP data. Currently, I'm uploading binaries manually. This makes development slower and testing problematic as well. I think a more desired outcome would be something similar to what we have in the Alert tab, which is to have some pcap data available right after starting the VM.
Do you guys think uploading pcap sample date as part of the ansible provisioning step would be a good approach? Or sensor stubs for pcap would be a better way? I would be curious about your thoughts! Thanks, Tibor
