Interesting question,
I have the same problem,
I hope you can find a solution.
Angelo
On 20/02/2019, 11:39, "Giovanni Conte" wrote:
Hi,
I would like to do the timestamps difference of packet captures (pcap). The
problem is that, when i do:
drill:zk=local> SELECT `timestamp` FRO
Hi,
I would like to do the timestamps difference of packet captures (pcap). The
problem is that, when i do:
drill:zk=local> SELECT `timestamp` FROM dfs.root.`/capture_file.pcap`;
i get (showing the first 2 rows)
| 2019-01-30 05:00:00.207 |
| 2019-01-30 05:00:00.207 |
We can see milliseconds accu
