Github user nickwallen commented on the issue:
https://github.com/apache/metron/pull/1157
+1 I ran this up successfully. Validated...
- [x] Alerts visible in the UI
- [x] Metron Service Check
- [x] Capture PCAP in HDFS
- [x] Read PCAP from HDFS using CLI.
- [x] Able to open resulting pcap file with `tshark -r <file>`.
- [x] Read PCAP from HDFS using PCAP UI
- [x] Download PCAP from UI and open in Wireshark GUI.

---