-
-
Notifications
You must be signed in to change notification settings - Fork 98
Revamp packet acquisition and parsing #3263
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
8950816
to
cc4f563
Compare
2f20148
to
fa3c416
Compare
c859b01
to
7bf0c4a
Compare
f7cb80e
to
a29640e
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I need some help from @tenzir/pipelines-squad, per the comment inline.
a29640e
to
1fe896f
Compare
200c92d
to
9e03864
Compare
Done as follows: zcat < pcap/vlan.pcap.gz | tshark -F pcap -r - -w vlan.pcap
9e03864
to
bbfa930
Compare
This small little diff massively improves throughput in situations where the previous operator yielded an empty batch multiple times in a row, and then suddenly starts yielding non-empty batches again.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As discussed in the office, I've simply pushed my review feedback directly onto your branch. From my side this is ready to go. Before merging, please take a look at the commits I've added.
This PR revamps the PCAP plugin under the new connector/format framework.