Trying to ingest json file in to quickwit.

[HeenaBansal2009]

Hi ,
I am trying to ingest json file in to Quickwit using below query. I am getting error. Please advice what is wrong here.

cat ./testdata/hackernews.json | ./quickwit index search --index hackernews

I followed below steps before ingesting data to quickwit :

• I converted the. native.zst downloaded from hackernews to json using clickhouse.
• feed index configuration as per data schema to quickwit with (./quickwit index create --index-config hacker news.yaml)
• Now When i am trying to ingest json file in to Quickwit using (cat ./testdata/hackernews.json | ./quickwit index search --index hackernews), I ma getting command usability error.

[PSeitz]

Hi,

you are calling index search instead of index ingest

cat ./testdata/hackernews.json | ./quickwit index ingest --index hackernews

Is this an error in the docs somewhere?

[HeenaBansal2009]

@PSeitz , ooh I see, No the document has the correct command. It could be copy paste error.
Thanks ! You made my day :-)
I can ingest the data now , however ,I can see that I am getting error

2022-05-03T15:28:22.936Z WARN {actor=quickwit_indexing::actors::indexing_server::IndexingServer}:{msg_id=1}::{index=hackernews gen=0}:{actor=Indexer}:{msg_id=1828}: quickwit_indexing::actors::indexer: err=ValueError("time", "Expected JSON number or array of JSON numbers, got '\"2014-11-01 14:05:56\"'.")

What datatype I should use in yaml for the date format like "2014-11-01 14:05:56"? text or i64?

[PSeitz]

If you want to use the date type, you need to convert it to RFC 3339 https://quickwit.io/docs/reference/index-config#date-type.
If you convert it to a timestamp, you can use i64.
Otherwise, you can use text.

[HeenaBansal2009]

@PSeitz ,
I have below configuration yaml and json data.
When I am updating the data in to date type , I am unable to create index with the error that date type should be i64. Is something , needs to be changed, anything I am doing wrong here. Please advise.

With the attached config.yaml , I am trying to ingest data getting error
022-05-03T15:28:22.936Z WARN {actor=quickwit_indexing::actors::indexing_server::IndexingServer}:{msg_id=1}::{index=hackernews gen=0}:{actor=Indexer}:{msg_id=1828}: quickwit_indexing::actors::indexer: err=ValueError("time", "Expected JSON number or array of JSON numbers, got '\"2014-11-01 14:05:56\"'.")
please advise how , I can ingest data in clickhouse.
My table schema is
CREATE TABLE hackernews ( id UInt32, deleted UInt8, type Enum('story' = 1, 'comment' = 2, 'poll' = 3, 'pollopt' = 4, 'job' = 5), by LowCardinality(String), time DateTime, text String, dead UInt8, parent UInt32, poll UInt32, kids Array(UInt32), url String, score Int32, title String, parts Array(UInt32), descendants Int32 ) ENGINE = MergeTree ORDER BY id

hackernews-config.yaml
`#

Index config file for gh-archive dataset.

version: 0

index_id: hackernews

doc_mapping:
field_mappings:
- name: id
type: u64
fast: true
- name: deleted
type: i64
- name: type
type: text
tokenizer: raw
- name: by
type: text
tokenizer: default
record: position
- name: time
type: i64
fast: true
- name: text
type: text
tokenizer: raw
- name: dead
type: i64
- name: parent
type: i64
- name: poll
type: i64
- name: kids
type: array
fast: true
- name: url
type: text
tokenizer: default
- name: score
type: i64
- name: title
type: text
tokenizer: default
record: position
- name: parts
type: array
- name: descendants
type: i64
fast: true

indexing_settings:
timestamp_field: time

search_settings:
default_search_fields: [title,kids,time ]
`

Dummy data set is like
{"id":18,"deleted":0,"type":"story","by":"farmer","time":"2006-10-09 12:55:46","text":"","dead":0,"parent":0,"poll":0,"kids":[454427],"url":"http:\/\/www.thealarmclock.com\/euro\/archives\/2006\/10\/stock holmnfounded_vo.html","score":3,"title":"Voddler Raises $2.2M For Virtual Cable TV","parts":[],"descendants":0} {"id":19,"deleted":0,"type":"story","by":"pg","time":"2006-10-09 12:59:03","text":"","dead":0,"parent":0,"poll":0,"kids":[454428],"url":"http:\/\/www.technologyreview.com\/read_article.aspx?id=17588&ch=en ergy","score":2,"title":"Will Silicon Light Illuminate the Future?","parts":[],"descendants":0} {"id":20,"deleted":0,"type":"story","by":"pg","time":"2006-10-09 13:00:38","text":"","dead":0,"parent":0,"poll":0,"kids":[23,454429],"url":"http:\/\/avc.blogs.com\/a_vc\/2006\/10\/search_by_salar.html","s core":8,"title":"Salaries at VC-backed companies","parts":[],"descendants":1} {"id":21,"deleted":0,"type":"story","by":"sama","time":"2006-10-09 18:21:11","text":"","dead":0,"parent":0,"poll":0,"kids":[22,454430],"url":"http:\/\/www.techcrunch.com\/2006\/10\/09\/google-has-acquired -youtube\/","score":6,"title":"Best IRR ever? YouTube 1.65B...","parts":[],"descendants":1} {"id":22,"deleted":0,"type":"comment","by":"pg","time":"2006-10-09 19:18:22","text":"It's kind of funny that Sevin Rosen is giving up at the same time Sequoia is scoring on this scale.","dead":0,"parent": 21,"poll":0,"kids":[454431],"url":"","score":0,"title":"","parts":[],"descendants":0} {"id":23,"deleted":0,"type":"comment","by":"starklysnarky","time":"2006-10-09 19:30:53","text":"This is interesting, but the limitations become apparent with one of their example searches: http:\/\/tinyur l.com\/qqnum\r\n\r\nThis comparison shows \"early stage\" companies offering a higher salary than fortune XXX companies. However, these numbers don't seem to indicate total compensation, such as benefits and stock or options.\r\n\r\nStill, a cool use of search technology.","dead":0,"parent":20,"poll":0,"kids":[454432],"url":"","score":0,"title":"","parts":[],"descendants":0} {"id":24,"deleted":0,"type":"story","by":"starklysnarky","time":"2006-10-09 20:54:25","text":"","dead":0,"parent":0,"poll":0,"kids":[454433],"url":"http:\/\/www.startup-review.com\/blog\/myspace-case-stud y-not-a-purely-viral-start.php","score":9,"title":"MySpace: Not a purely viral start","parts":[],"descendants":0} {"id":25,"deleted":0,"type":"story","by":"starklysnarky","time":"2006-10-09 22:33:32","text":"","dead":0,"parent":0,"poll":0,"kids":[454436],"url":"http:\/\/www.usatoday.com\/money\/industries\/technology \/2004-04-21-sas-culture_x.htm","score":5,"title":"A Story About Not Going IPO During The Bubble","parts":[],"descendants":0} {"id":26,"deleted":0,"type":"story","by":"zak","time":"2006-10-09 23:12:13","text":"","dead":1,"parent":0,"poll":0,"kids":[454437],"url":"http:\/\/www.nytimes.com\/2006\/09\/10\/business\/yourmoney\/10str a.html?ex=1315540800&en=6889d6d8b8f28c5a&ei=5090&partner=rssuserland&emc=rss","score":1,"title":"Spam stock tips work - for spammers","parts":[],"descendants":-1} {"id":27,"deleted":0,"type":"story","by":"spez","time":"2006-10-10 07:04:03","text":"","dead":0,"parent":0,"poll":0,"kids":[454438],"url":"http:\/\/www.google.com\/press\/pressrel\/google_youtube.html","s core":12,"title":"Google Acquires YouTube For $1.6B","parts":[],"descendants":0} {"id":28,"deleted":0,"type":"story","by":"spez","time":"2006-10-10 07:35:10","text":"","dead":1,"parent":0,"poll":0,"kids":[],"url":"http:\/\/www.google.com\/press\/pressrel\/google_youtube.html","score": 1,"title":"google!","parts":[],"descendants":-1}

[fmassot]

From your dummy data, we have a json document with "time":"2006-10-09 12:55:46" but in your schema, you defined that time was i64, hence the error. Quickwit expects here a JSON number as it does not know how to convert it.

We have opened the issue #1328 to ease the dev XP on this, it will be done soon. Meanwhile, you need to convert the string into i64 yourself :/

[HeenaBansal2009]

• How I can confirm that data is ingested in to quickwit ?
• Querying in quickwit results in to below error?
  ./quickwit index search --index hackernews_2 --query "zak"
  {
  "numHits": 0,
  "hits": [],
  "elapsedTimeMicros": 1820,
  "errors": [
  "SplitSearchError { error: "Invalid query: Expected a valid integer: 'ParseIntError { kind: InvalidDigit }'", split_id: "01G25HXAQ0VGA3XQVP7RN64279", retryable_error: true }"
  ]
  }

And I have record matching with 'zak'

{"id":26,"deleted":0,"type":"story","by":"zak","time":"1160460733","by":"zak","text":"","dead":1,"parent":0,"poll":0,"kids":[454437],"url":"http:\/\/www.nytimes.com\/2006\/09\/10\/business\/yourmoney\/10s
tra.html?ex=1315540800&en=6889d6d8b8f28c5a&ei=5090&partner=rssuserland&emc=rss","score":1,"title":"Spam stock tips work - for spammers","parts":[],"descendants":-1}

[fmassot]

Quickwit is strict regarding the schema and will not do the conversion from a string to an integer. The document here has a time defined as a string "time":"1160489043", hence the error.
I would expect Quickwit not to insert this document but the SplitSearchError suggests the contrary, this may be a bug, I need to investigate that. Thanks for the report.
Meanwhile, use an JSON number in your json document, like "time":1160460733.

[HeenaBansal2009]

Thanks @fmassot. It worked , I can ingest data in to quickwit.
However when I search using curl command , I am getting read async error.
What could go wrong here.
heena@Clickhouse1:~/quickwit-v0.2.1$ ./quickwit index search --index hackernews_5 --query Ambulance 2022-05-04T13:25:27.169Z ERROR quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads" 2022-05-04T13:25:27.171Z ERROR quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads" { "numHits": 1, "hits": [ { "by": [ "sgk284" ], "id": [ 2923885 ], "kids": [ 2923989, 2925247, 2924320, 2925442, 2924224, 2923994, 2924209, 2924702, 2925235, 2925010, 2924319, 2924638, 2925781, 2923943, 2924298 ], "score": [ 622 ], "text": [ "" ], "time": [ 1314251037 ], "title": [ "Icon Ambulance" ], "type": [ "story" ], "url": [ "https://plus.google.com/107117483540235115863/posts/gcSStkKxXTw" ] } ], "elapsedTimeMicros": 77324, "errors": [ "SplitSearchError { error: \"Internal error: An IO error occurred: 'Unsupported operation. StorageDirectory only supports async reads: \"ccf34dbac4614904b1124b751756dab8.term\"'.\", split_id: \"01G26NHMCV1BAP61AS006H7A75\", retryable_error: true }", "SplitSearchError { error: \"Internal error: An IO error occurred: 'Unsupported operation. StorageDirectory only supports async reads: \"6dc68fd1122c44a985ccf5348907c5f8.term\"'.\", split_id: \"01G26NK8YX0DM4YSVH6J9YD1GN\", retryable_error: true }" ] }
The output with curl command to search the same keyword.
heena@Clickhouse1:~/quickwit-v0.2.1$ curl "http://0.0.0.0:7280/api/v1/hackernews_5/search/stream?query=Ambulance&outputFormat=csv&fastField=id" curl: (18) transfer closed with outstanding read data remaining heena@Clickhouse1:~/quickwit-v0.2.1$

Attached the console logs when queried the commands ,This might be helpful

2022-05-04T13:24:03.927Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed
2022-05-04T13:24:13.927Z  INFO quickwit_serve::rest: search_stream index_id=hackernews_5 request=SearchStreamRequestQueryString { query: "google", search_fields: None, start_timestamp: None, end_timestamp: None, fast_field: "id", output_format: ClickHouseRowBinary, partition_by_field: None }
2022-05-04T13:24:13.927Z  INFO search_adapter:leaf_search_stream: quickwit_search::service: leaf_search index="hackernews_5" splits=[SplitIdAndFooterOffsets { split_id: "01G26NHEB10T2DX37288EKX0SJ", split_footer_start: 270323695, split_footer_end: 278910648 }, SplitIdAndFooterOffsets { split_id: "01G26NHMCV1BAP61AS006H7A75", split_footer_start: 2678183120, split_footer_end: 2678792526 }, SplitIdAndFooterOffsets { split_id: "01G26NK8YX0DM4YSVH6J9YD1GN", split_footer_start: 349970236, split_footer_end: 350048435 }]
2022-05-04T13:24:13.968Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NHMCV1BAP61AS006H7A75}:warmup: quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:13.969Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NK8YX0DM4YSVH6J9YD1GN}:warmup: quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:13.970Z  INFO search_adapter:leaf_search_stream: quickwit_search::service: leaf_search index="hackernews_5" splits=[SplitIdAndFooterOffsets { split_id: "01G26NHEB10T2DX37288EKX0SJ", split_footer_start: 270323695, split_footer_end: 278910648 }, SplitIdAndFooterOffsets { split_id: "01G26NHMCV1BAP61AS006H7A75", split_footer_start: 2678183120, split_footer_end: 2678792526 }, SplitIdAndFooterOffsets { split_id: "01G26NK8YX0DM4YSVH6J9YD1GN", split_footer_start: 349970236, split_footer_end: 350048435 }]
2022-05-04T13:24:13.972Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed
2022-05-04T13:24:14.006Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NHMCV1BAP61AS006H7A75}:warmup: quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:14.006Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NK8YX0DM4YSVH6J9YD1GN}:warmup: quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:14.007Z ERROR quickwit_serve::rest: Error when streaming search results. error=Internal error: `Internal error: `An IO error occurred: 'Unsupported operation. StorageDirectory only supports async reads: "ccf34dbac4614904b1124b751756dab8.term"'`.`.
2022-05-04T13:24:14.009Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed
2022-05-04T13:24:49.399Z  INFO quickwit_serve::rest: search_stream index_id=hackernews_5 request=SearchStreamRequestQueryString { query: "google.com", search_fields: None, start_timestamp: None, end_timestamp: None, fast_field: "id", output_format: Csv, partition_by_field: None }
2022-05-04T13:24:49.400Z  INFO search_adapter:leaf_search_stream: quickwit_search::service: leaf_search index="hackernews_5" splits=[SplitIdAndFooterOffsets { split_id: "01G26NHEB10T2DX37288EKX0SJ", split_footer_start: 270323695, split_footer_end: 278910648 }, SplitIdAndFooterOffsets { split_id: "01G26NHMCV1BAP61AS006H7A75", split_footer_start: 2678183120, split_footer_end: 2678792526 }, SplitIdAndFooterOffsets { split_id: "01G26NK8YX0DM4YSVH6J9YD1GN", split_footer_start: 349970236, split_footer_end: 350048435 }]
2022-05-04T13:24:49.442Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NHMCV1BAP61AS006H7A75}:warmup: quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:49.442Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NK8YX0DM4YSVH6J9YD1GN}:warmup: quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:49.443Z  INFO search_adapter:leaf_search_stream: quickwit_search::service: leaf_search index="hackernews_5" splits=[SplitIdAndFooterOffsets { split_id: "01G26NHEB10T2DX37288EKX0SJ", split_footer_start: 270323695, split_footer_end: 278910648 }, SplitIdAndFooterOffsets { split_id: "01G26NHMCV1BAP61AS006H7A75", split_footer_start: 2678183120, split_footer_end: 2678792526 }, SplitIdAndFooterOffsets { split_id: "01G26NK8YX0DM4YSVH6J9YD1GN", split_footer_start: 349970236, split_footer_end: 350048435 }]
2022-05-04T13:24:49.452Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed
2022-05-04T13:24:49.494Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NHMCV1BAP61AS006H7A75}:warmup: quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:49.495Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NK8YX0DM4YSVH6J9YD1GN}:warmup: quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:24:49.496Z ERROR quickwit_serve::rest: Error when streaming search results. error=Internal error: `Internal error: `An IO error occurred: 'Unsupported operation. StorageDirectory only supports async reads: "ccf34dbac4614904b1124b751756dab8.term"'`.`.
2022-05-04T13:24:49.503Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed
2022-05-04T13:26:29.659Z  INFO quickwit_serve::rest: search_stream index_id=hackernews_5 request=SearchStreamRequestQueryString { query: "Ambulance", search_fields: None, start_timestamp: None, end_timestamp: None, fast_field: "id", output_format: Csv, partition_by_field: None }
2022-05-04T13:26:29.661Z  INFO search_adapter:leaf_search_stream: quickwit_search::service: leaf_search index="hackernews_5" splits=[SplitIdAndFooterOffsets { split_id: "01G26NHEB10T2DX37288EKX0SJ", split_footer_start: 270323695, split_footer_end: 278910648 }, SplitIdAndFooterOffsets { split_id: "01G26NHMCV1BAP61AS006H7A75", split_footer_start: 2678183120, split_footer_end: 2678792526 }, SplitIdAndFooterOffsets { split_id: "01G26NK8YX0DM4YSVH6J9YD1GN", split_footer_start: 349970236, split_footer_end: 350048435 }]
2022-05-04T13:26:29.705Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NHMCV1BAP61AS006H7A75}:warmup: quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:26:29.706Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NK8YX0DM4YSVH6J9YD1GN}:warmup: quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:26:29.707Z  INFO search_adapter:leaf_search_stream: quickwit_search::service: leaf_search index="hackernews_5" splits=[SplitIdAndFooterOffsets { split_id: "01G26NHEB10T2DX37288EKX0SJ", split_footer_start: 270323695, split_footer_end: 278910648 }, SplitIdAndFooterOffsets { split_id: "01G26NHMCV1BAP61AS006H7A75", split_footer_start: 2678183120, split_footer_end: 2678792526 }, SplitIdAndFooterOffsets { split_id: "01G26NK8YX0DM4YSVH6J9YD1GN", split_footer_start: 349970236, split_footer_end: 350048435 }]
2022-05-04T13:26:29.713Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed
2022-05-04T13:26:29.756Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NHMCV1BAP61AS006H7A75}:warmup: quickwit_directories::storage_directory: path="ccf34dbac4614904b1124b751756dab8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:26:29.757Z ERROR search_adapter:leaf_search_stream:leaf_search_stream:leaf_search_stream_single_split{split_id=01G26NK8YX0DM4YSVH6J9YD1GN}:warmup: quickwit_directories::storage_directory: path="6dc68fd1122c44a985ccf5348907c5f8.term" msg="Unsupported operation. StorageDirectory only supports async reads"
2022-05-04T13:26:29.757Z ERROR quickwit_serve::rest: Error when streaming search results. error=Internal error: `Internal error: `An IO error occurred: 'Unsupported operation. StorageDirectory only supports async reads: "ccf34dbac4614904b1124b751756dab8.term"'`.`.
2022-05-04T13:26:29.761Z ERROR search_adapter:leaf_search_stream:leaf_search_stream: quickwit_search::search_stream::leaf: Failed to send leaf search stream result. Stop sending. Cause: channel closed

[HeenaBansal2009]

Hi @fmassot , I really appreciate if you can help here. I am kind of stuck with next steps.

[HeenaBansal2009]

@fmassot , I tride capturing the tcpdump on the curl request and it seems checksum error when feeding GET request.

`root@Clickhouse1:~# tcpdump -i lo -s 0 -A -vv 'tcp dst port 7280'
tcpdump: listening on lo, link-type EN10MB (Ethernet), capture size 262144 bytes
13:08:20.382023 IP (tos 0x0, ttl 64, id 47643, offset 0, flags [DF], proto TCP (6), length 60)
localhost.51536 > localhost.7280: Flags [S], cksum 0xfe30 (incorrect -> 0x3432), seq 1079359353, win 65495, options [mss 65495,sackOK,TS val 1999685391 ecr 0,nop,wscale 7], length 0
E..<..@.@............P.p@U.y.........0.........
w0..........
13:08:20.382060 IP (tos 0x0, ttl 64, id 47644, offset 0, flags [DF], proto TCP (6), length 52)
localhost.51536 > localhost.7280: Flags [.], cksum 0xfe28 (incorrect -> 0xdd6d), seq 1079359354, ack 4224729963, win 512, options [nop,nop,TS val 1999685391 ecr 1999685391], length 0
E..4..@.@............P.p@U.z..Ck.....(.....
w0..w0..
13:08:20.382201 IP (tos 0x0, ttl 64, id 47645, offset 0, flags [DF], proto TCP (6), length 207)
localhost.51536 > localhost.7280: Flags [P.], cksum 0xfec3 (incorrect -> 0x3fad), seq 0:155, ack 1, win 512, options [nop,nop,TS val 1999685392 ecr 1999685391], length 155
E.....@.@.. .........P.p@U.z..Ck...........
w0..w0..GET /api/v1/hackernews_5/search/stream?query=Ambulance&outputFormat=csv&fastField=id HTTP/1.1
Host: 0.0.0.0:7280
User-Agent: curl/7.68.0
Accept: /

13:08:20.383690 IP (tos 0x0, ttl 64, id 47646, offset 0, flags [DF], proto TCP (6), length 52)
localhost.51536 > localhost.7280: Flags [.], cksum 0xfe28 (incorrect -> 0xdc62), seq 155, ack 109, win 512, options [nop,nop,TS val 1999685393 ecr 1999685393], length 0
E..4..@.@............P.p@U....C......(.....
w0..w0..
13:08:20.477692 IP (tos 0x0, ttl 64, id 47647, offset 0, flags [DF], proto TCP (6), length 52)
localhost.51536 > localhost.7280: Flags [F.], cksum 0xfe28 (incorrect -> 0xdba4), seq 155, ack 110, win 512, options [nop,nop,TS val 1999685487 ecr 1999685487], length 0
E..4..@.@............P.p@U....C......(.....
w0.ow0.o

`