Github user justinleet commented on the issue:
https://github.com/apache/metron/pull/879
@mmiklavc Check out
https://github.com/apache/metron/pull/882#issuecomment-356109443. Looks like
the squid mapping @cestella uses doesn't line up (which isn't terribly
surprising because it was ES2 until a couple hours ago).---
