You might have to add the pcap format in the dfs storage plugin config [1]
Something like this :
"formats": {
"csv": {
"type": "text",
"extensions": [
"csv"
],
"delimiter": ","
},
"parquet": {
"type": "parquet"
},
"json": {
"type": "json",
"extensions": [
"json"
]
},
"abc": {
"type": "json",
"extensions": [
"abc"
]
},
"pcap": {
"type": "pcap",
"extensions": [
"pcap"
]
}
}
Then you can specify "cap" as the the default format for any workspace.
Configuring that is also described in [1]
Parth
[1] https://drill.apache.org/docs/plugin-configuration-basics/
On Wed, Jul 26, 2017 at 1:36 PM, Jinfeng Ni <j...@apache.org> wrote:
> Hi Bob,
>
> Is DRILL-5432 the one you are talking about? I saw it's merged and should
> have been put in the release candidate.
>
> What type of error did you see when you tried to query a PCAP? Also, it may
> help to provide the commit id of your build, by run the following query:
>
> SELECT * from sys.version;
>
>
> https://issues.apache.org/jira/browse/DRILL-5432
>
>
> On Wed, Jul 26, 2017 at 1:03 PM, Bob Rudis <b...@rud.is> wrote:
>
> > I wasn't sure if this belonged on the dev list or not but I was
> > peeking around the JIRA for 1.11.0 RC and noticed that it _looked_
> > like PCAP support is/was going to be in 1.11.0 but when I did a quick
> > d/l and test of the RC (early yesterday) and tried to query a PCAP it
> > did not work.
> >
> > I'm wondering if I just grabbed a too-early RC and shld try again or
> > if PCAP support will miss the 1.11.0 release. (I might have misread a
> > tweet from Ted that seemed to suggest it might not make it for
> > 1.11.0).
> >
> > If it's the latter, will that mean the mapr github pcap drill example
> > shld work as an interim substitute until 1.12.0 (NOTE: I haven't tried
> > that yet)?
> >
> > If PCAP support had not previously, actually made the cut for 1.11.0
> > RC can I make a last-minute req to have it be included? :-)
> >
> > thx for the hard work by the dev team. I ended up scanning through all
> > the JIRAs and that's _alot_ of work. it's definitely appreciated.
> >
> > thx,
> >
> > -Bob
> >
>
