Github user nickwallen commented on the issue:
https://github.com/apache/incubator-metron/pull/531
> As an alternative method for getting DHCP data out of pcap, you might
consider the existing Bro sensor, which essentially does what dhcpdump does...
The current Bro parser only supports HTTP and DNS records coming out of
Bro. Bro does a lot more indeed, but we don't have parsers for all of that
yet.
I think enhancing the existing Bro parser to support DHCP records would be
an excellent approach. The Bro plugin that we have can be configured to land
any of the record types in Kafka, so that would not be a problem.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
