[
https://issues.apache.org/jira/browse/METRON-870?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15978744#comment-15978744
]
ASF GitHub Bot commented on METRON-870:
---------------------------------------
Github user nishihatapalmer commented on the issue:
https://github.com/apache/incubator-metron/pull/541
When you say use regexes, do you mean use the regex syntax to create fixed
length sequences, or do you mean use full regex functionality? Full regex
exists using NFAs and DFAs, but needs testing, as I haven't looked at that part
of byteseek for quite some time.
> Add filtering by packet payload to the pcap query
> -------------------------------------------------
>
> Key: METRON-870
> URL: https://issues.apache.org/jira/browse/METRON-870
> Project: Metron
> Issue Type: Improvement
> Reporter: Casey Stella
>
> Currently we have the ability to filter packets in the pcap query tool by
> header information (src/dest ip/port). We should be able to filter by binary
> regex on the packets themselves.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
