I agree; it looks limited in scope.  I changed the version.   Thanks for
the contribution, Matt!

Casey

On Sun, Nov 6, 2016 at 3:22 PM, Matt Foley <ma...@apache.org> wrote:

> Please consider including
>
>     https://github.com/apache/incubator-metron/pull/345
>
>     METRON-532 Define Profile Period When Calling PROFILE_GET
>
>
>
> if it passes review in the next few days.
>
> This builds on top of Nick’s work in METRON-529.
>
>
>
> Thanks,
>
> --Matt
>
>
>
> On 11/3/16, 10:53 AM, "zeo...@gmail.com" <zeo...@gmail.com> wrote:
>
>
>
>     I'll sit on METRON-447 until early next week and if nobody has any
>
>     additional feedback I'll move forward with a PR.
>
>
>
>     Regarding the IPv6 filter, I have not.  I must have missed that IS_IP
>
>     allows a type of IPv6 in the past - can wipe that one off the list.
>
>
>
>     Jon
>
>
>
>     On Thu, Nov 3, 2016 at 11:05 AM Casey Stella <ceste...@gmail.com>
> wrote:
>
>
>
>     > Ok, filling in the rest of my thoughts:
>
>     >
>
>     >    - Regarding METRON-447, if you're willing to do it, then great!
>
>     >    - Regarding avoiding sending IPv6 traffic, have you tried setting
> a
>
>     >    global validation that will mark invalid the messages that are
> not IPv4?
>
>     >    It does make its way into the parser, but will be redirected to
> the
>
>     > invalid
>
>     >    queue rather than on to enrichment.
>
>     >
>
>     >
>
>     > On Wed, Nov 2, 2016 at 4:53 PM, zeo...@gmail.com <zeo...@gmail.com>
> wrote:
>
>     >
>
>     > > *Proposing and justifying a JIRA from the list of unresolved JIRAs*
>
>     > > - Doesn't METRON-463 finish off METRON-460 as well?  460 doesn't
> appear
>
>     > to
>
>     > > be slated for the next release.
>
>     > > - I think METRON-447 should be in the next release, as it provides
>
>     > > continuity for upgrades.  I'd call it critical and I'm willing to
> do it -
>
>     > > I'm looking for feedback per the description.  This is an easy fix.
>
>     > > - I would like to see METRON-446 in the next release, but I'll
> call it
>
>     > nice
>
>     > > to have.  This causes an error if you follow the older (but
> "current")
>
>     > bare
>
>     > > metal install instructions
>
>     > > <https://cwiki.apache.org/confluence/display/METRON/
>
>     > > Metron+Installation+on+an+Ambari-Managed+Cluster>
>
>     > > using master (Step 5 #3).
>
>     > > - If ansible upgrades are supported/recommended I'd say that
> METRON-448
>
>     > is
>
>     > > critical.  If ansible upgrades aren't considered
> supported/recommended,
>
>     > I'd
>
>     > > downgrade to nice to have.
>
>     > >
>
>     > > *Other comments*
>
>     > > - METRON-276 had an interesting comment - "George Vetticaden added
> a
>
>     > > comment - 15/Jul/16 12:22 This needs to be prioritized higher and
> be
>
>     > > completed byt he 0.2.2 release".
>
>     > > - I think there either needs to be guidance on how to avoid
> sending IPv6
>
>     > > bro traffic into Metron (METRON-348, METRON-293, METRON-285, and
>
>     > > METRON-286) or the ability to parse IPv6 traffic.  This could be as
>
>     > simple
>
>     > > as using the logs-to-kafka2.bro that I have in METRON-348 and
> updating
>
>     > some
>
>     > > comments/documentation.
>
>     > >
>
>     > > Jon
>
>     > >
>
>     > > On Wed, Nov 2, 2016 at 4:11 PM Casey Stella <ceste...@gmail.com>
> wrote:
>
>     > >
>
>     > > > Hello Everyone,
>
>     > > >
>
>     > > > It's me, your friendly Metron Release Manager and it's time to
> start
>
>     > > > thinking about the next release.
>
>     > > >
>
>     > > > *JIRA Housekeeping*
>
>     > > >
>
>     > > > For those who get email alerts via JIRA on changes, it should be
> no
>
>     > > > surprise that I went through did some JIRA housekeeping in
> anticipation
>
>     > > of
>
>     > > > the next release:
>
>     > > >
>
>     > > >    - Ensured that everything committed since the last release was
>
>     > closed
>
>     > > >    and marked 0.2.2BETA
>
>     > > >    - Ensured that everything in active work (with a PR that was
> active
>
>     > in
>
>     > > >    the last month on github) had a release version of 0.2.2BETA
> and "In
>
>     > > >    Progress"
>
>     > > >    - With the exception of METRON-533
>
>     > > >    <https://issues.apache.org/jira/browse/METRON-533>, which is
>
>     > release
>
>     > > >    housekeeping, everything with a release version of 0.2.2BETA
> is
>
>     > actual
>
>     > > > work
>
>     > > >    that is in progress, rather than aspirational.
>
>     > > >    - Went through the list of JIRAs that are not done and have no
>
>     > version
>
>     > > >    associated with them and ensured that they weren't duplicates
> (to
>
>     > the
>
>     > > > best
>
>     > > >    of my abilities).
>
>     > > >
>
>     > > > This may mean that I moved your favorite JIRA around or changed
> the
>
>     > > > release.  I did not do this because it was unimportant or I
> considered
>
>     > it
>
>     > > > unfit for the next release, but because I want to begin the
> exercise of
>
>     > > > choosing what makes the release with the community with an
> accurate
>
>     > > picture
>
>     > > > of the current state in JIRA.
>
>     > > >
>
>     > > > *What's made it so far into the next release*
>
>     > > >
>
>     > > >    - METRON-410 mysql_server&apos;s MySQL install causes mutually
>
>     > assured
>
>     > > >    destruction when installed on the same machine as the Ambari
> Hive
>
>     > > MySQL
>
>     > > >    closes apache/incubator-metron#317
>
>     > > >    - METRON-148 Compress logs with logrotate (ottobackwards)
> closes
>
>     > > >    apache/incubator-metron#329
>
>     > > >    - METRON-536 Fix apache id for Otto Fowler (ottobackwards)
> closes
>
>     > > >    apache/incubator-metron#331
>
>     > > >    - METRON-249: Field Transformation functions fail to handle
> invalid
>
>     > > user
>
>     > > >    inputs closes apache/incubator-metron#333
>
>     > > >    - METRON-521: Stellar function documentation needs
> grammar/clarity
>
>     > > fixes
>
>     > > >    closes apache/incubator-metron#327
>
>     > > >    - METRON-484 Opentaxi service does not show count for
> subscribed
>
>     > > >    services   (nickwallen) closes apache/incubator-metron#306
>
>     > > >    - METRON-495: Upgrade Storm to 1.0.x (justinleet via mmiklavc)
>
>     > closes
>
>     > > >    apache/incubator-metron#318
>
>     > > >    - METRON-506 Add Otto Fowler to commiters (ottobackwards)
> closes
>
>     > > >    apache/incubator-metron#330
>
>     > > >    - METRON-515: Stellar IS_EMPTY() function does not work as
> expected
>
>     > > >    (merrimanr via mmiklavc) closes apache/incubator-metron#324
>
>     > > >    - METRON-512: Migrate Metron's default global junit version
> from 4.4
>
>     > > to
>
>     > > >    4.12 (ottobackwards via mmiklavc) closes
> apache/incubator-metron#325
>
>     > > >    - METRON-464 Force co-location of all Metron components closes
>
>     > > >    apache/incubator-metron#315
>
>     > > >    - METRON-513 Ambari Management Pack Metainfo should not
> advertise
>
>     > > >    version closes apache/incubator-metron#322
>
>     > > >    - METRON-465 Automatically set storm-site topology.classpath
> closes
>
>     > > >    apache/incubator-metron#314
>
>     > > >    - METRON-500: fix assembly id (2xyo via mmiklavc) closes
>
>     > > >    apache/incubator-metron#313
>
>     > > >    - METRON-509: Add pcap query filter REST API documentation to
> README
>
>     > > >    (mmiklavc) closes apache/incubator-metron#319
>
>     > > >    - METRON-505: Add environment variable and system property
> functions
>
>     > > to
>
>     > > >    the Stellar language (mmiklavc) closes
> apache/incubator-metron#312
>
>     > > >    - METRON-502: Make the ParserIntegrationTest more clear on
> errors
>
>     > > >    (ottobackwards via mmiklavc) closes
> apache/incubator-metron#311
>
>     > > >    - METRON-441: Aggregator function "MIN" does not work for
> threat
>
>     > > triage
>
>     > > >    (cestella via mmiklavc) closes apache/incubator-metron#309
>
>     > > >    - METRON-403: Bro elasticsearch bulk index item fails when DNS
>
>     > > response
>
>     > > >    includes CNAME (nickwallen via mmiklavc) closes
>
>     > > > apache/incubator-metron#305
>
>     > > >    - METRON-424 ability to validate ip addresses against both
> IPV4 and
>
>     > > IPV6
>
>     > > >    closes apache/incubator-metron#303
>
>     > > >    - METRON-496: Field transformations are applied after parser
>
>     > > validation
>
>     > > >    closes apache/incubator-metron#304
>
>     > > >    - METRON-489: RemoveSubdomains Stellar Function behaves
> incorrectly
>
>     > > for
>
>     > > >    some domains closes apache/incubator-metron#300
>
>     > > >    - METRON-499 Check for Metron Jar Fails During Quick-Dev
> Deployment
>
>     > > >    (nickwallen via dlyle65535) closes apache/incubator-metron#307
>
>     > > >    - METRON-488: Snort should use a proper CSV implementation
> (cestella
>
>     > > via
>
>     > > >    mmiklavc) closes apache/incubator-metron#297
>
>     > > >    - METRON-482 Add logging to GrokParser to indicate supplied
> TimeZone
>
>     > > >    (justinleet via mmiklavc) closes apache/incubator-metron#291
>
>     > > >    - METRON-326 Error Handling in ElasticsearchWriter
> (justinleet via
>
>     > > >    mmiklavc) closes apache/incubator-metron#286
>
>     > > >    - METRON-439: Stellar : IS_EMPTY(host) throws exception
> (mmiklavc)
>
>     > > >    closes apache/incubator-metron#296
>
>     > > >    - METRON-473 Add LENGTH() To Stellar closes
>
>     > > apache/incubator-metron#293
>
>     > > >    - METRON-371: Changing logging level to INFO when there's not
> a
>
>     > > config.
>
>     > > >    closes apache/incubator-metron#295
>
>     > > >    - METRON-432: Fix pcap field resolver to return object
> instead of
>
>     > > string
>
>     > > >    value (mmiklavc) closes apache/incubator-metron#298
>
>     > > >    - METRON-421 Make Stellar Profiler Client API Accessible in
> Parser
>
>     > and
>
>     > > >    Enrichment Topologies (nickwallen) closes
>
>     > apache/incubator-metron#290
>
>     > > >    - METRON-492 Run metron_common build check as local_action
>
>     > > >    (kylerichardson via dlyle65535) closes
> apache/incubator-metron#302
>
>     > > >    - METRON-461 Install Metron Data Management tools
> (dlyle65535 via
>
>     > > >    justinleet) closes apache/incubator-metron#289
>
>     > > >    - METRON-487 Correct the license in the StixExtractorTest
> (cestella
>
>     > > via
>
>     > > >    nickwallen) closes apache/incubator-metron#294
>
>     > > >    - METRON-171 Add .class files to gitignore (ottobackwards via
>
>     > > >    nickwallen) closes apache/incubator-metron#292
>
>     > > >    - METRON-425 Stellar transformation fails to handle special
>
>     > characters
>
>     > > >    (ottobackwards via justinleet) closes
> apache/incubator-metron#299
>
>     > > >    - METRON-459 Bad file location for
>
>     > > >    org.apache.metron.spout.pcap.Endianness.java (danieljue via
>
>     > > nickwallen)
>
>     > > >    closes apache/incubator-metron#275
>
>     > > >    - METRON-474 Fix Vagrant Ansible Defaults for Quick & Full Dev
>
>     > > >    (ottobackwards via nickwallen) closes
> apache/incubator-metron#284
>
>     > > >    - METRON-478: Add Michael Miklavcic, Justin Leet, Nick Allen,
> and
>
>     > > David
>
>     > > >    Lyle to Metron website community page (mmiklavc) closes
>
>     > > >    apache/incubator-metron#287
>
>     > > >
>
>     > > > *What else will make it?*
>
>     > > >
>
>     > > > Ok, so now that we know what's in there already, I need to ask
> your
>
>     > help
>
>     > > in
>
>     > > > determining what you want in the next release that is not
> currently
>
>     > being
>
>     > > > worked on.  In order to do that, please help me by responding to
> this
>
>     > > email
>
>     > > > and
>
>     > > >
>
>     > > >    - proposing and justifying a JIRA from the list of unresolved
> JIRAs
>
>     > > >    <
>
>     > > > https://issues.apache.org/jira/browse/METRON-469?jql=
>
>     > > project%20%3D%20METRON%20AND%20resolution%20%3D%
> 20Unresolved%20AND%
>
>     > > 20fixVersion%20is%20EMPTY%20ORDER%20BY%20priority%20DESC
>
>     > > > >
>
>     > > >    that are not currently scheduled and let me know which ones
> should
>
>     > be
>
>     > > >    included.  Please include whether the JIRA is "Nice to Have"
> or
>
>     > > > "Critical
>
>     > > >    to Have" and if you volunteer to do it.
>
>     > > >    - proposing and justifying that one of the in-progress tasks
>
>     > > >    <
>
>     > > > https://issues.apache.org/jira/browse/METRON-510?jql=
>
>     > > project%20%3D%20METRON%20AND%20resolution%20%3D%
> 20Unresolved%20AND%
>
>     > > 20fixVersion%20%3D%200.2.2BETA%20ORDER%20BY%20priority%20DESC
>
>     > > > >
>
>     > > >    should *not* be included for release
>
>     > > >
>
>     > > > I'd like to aim to get release candidates out in the next two
> weeks, so
>
>     > > > let's look forward a vigorous discussion and a great release.
>
>     > > >
>
>     > > > Thanks for the contributions and for your continued engagement
> in the
>
>     > > > Metron community.  If you see something that you don't like in
> this
>
>     > > > process, please let me know.  Feedback is very welcome.
>
>     > > >
>
>     > > > Best,
>
>     > > >
>
>     > > > Casey
>
>     > > >
>
>     > > >    -
>
>     > > >
>
>     > > --
>
>     > >
>
>     > > Jon
>
>     > >
>
>     >
>
>     --
>
>
>
>     Jon
>
>
>
>
>
>

Reply via email to