Github user nickwallen commented on the issue: https://github.com/apache/metron/pull/1157 +1 I ran this up successfully. Validated... - [x] Alerts visible in the UI - [x] Metron Service Check - [x] Capture PCAP in HDFS - [x] Read PCAP from HDFS using CLI. - [x] Able to open resulting pcap file with `tshark -r <file>`. - [x] Read PCAP from HDFS using PCAP UI - [x] Download PCAP from UI and open in Wireshark GUI. ![screen shot 2018-08-15 at 12 29 47 pm](https://user-images.githubusercontent.com/2475409/44160249-d5a21b00-a087-11e8-94b7-b5fd1daec8d9.png)
---