-
-
Notifications
You must be signed in to change notification settings - Fork 99
Remove outdated table slice encodings #2798
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove outdated table slice encodings #2798
Conversation
Following the introduction of a minimum partition version of 1 with #2778, we're no longer able to encounter any table slices that are MessagePack-encoded or use an older version of the mapping of our data model onto Apache Arrow. There's a future refactoring that is now unblocked, which is a total replacement of the legacy baggage that is the `table_slice` API with an easier-to-use wrapper around the same underlying data that makes more assumptions about the underlying column-major memory layout. This is based on #2797 to avoid merge conflicts.
We've removed the Broker plugin—it was written for Zeek 3.x and never worked with newer versions. It's dependencies were also troublesome to get them working with CAF 0.18. The real-time Zeek import will return in a future plugin by connecting to Zeek directly via a websocket
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The changes look good. Can you convince the reviewer that they are complete?
The process was the following:
The one thing |
Bump CAF to version 0.18.6
…ve-old-table-slice-encodings
Following the introduction of a minimum partition version of 1 with #2778, we're no longer able to encounter any table slices that are MessagePack-encoded or use an older version of the mapping of our data model onto Apache Arrow.
There's a future refactoring that is now unblocked, which is a total replacement of the legacy baggage that is the
table_slice
API with an easier-to-use wrapper around the same underlying data that makes more assumptions about the underlying column-major memory layout.This is based on #2797 to avoid merge conflicts.