[
https://issues.apache.org/jira/browse/DRILL-7852?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Vitalii Diravka updated DRILL-7852:
-----------------------------------
Labels: pcap pcapng plugin (was: )
> Handle PCAP/PCAPNG Better
> -------------------------
>
> Key: DRILL-7852
> URL: https://issues.apache.org/jira/browse/DRILL-7852
> Project: Apache Drill
> Issue Type: Improvement
> Components: Storage - PCAP
> Affects Versions: 1.18.0
> Reporter: Vitalii Diravka
> Assignee: Vitalii Diravka
> Priority: Major
> Labels: pcap, pcapng, plugin
> Fix For: 1.19.0
>
>
> The _PCAP Next Generation Dump File Format_ (or pcapng for short) [1] is an
> attempt to overcome the limitations of the currently widely used (but
> limited) libpcap format.
> At a first level, it is desirable to query and filter by source and
> destination IP and port, and src/dest mac addreses or by protocol. Beyond
> that, however, it would be very useful to be able to group packets by TCP
> session and eventually to look at packet contents.
> Initial work is available at
> https://github.com/mapr-demos/drill/tree/pcapng_dev
> [1] https://pcapng.github.io/pcapng/
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
