{"action":"closed","issue":{"url":"https://api.github.com/repos/mapr-demos/drill-pcap-format/issues/2","repository_url":"https://api.github.com/repos/mapr-demos/drill-pcap-format","labels_url":"https://api.github.com/repos/mapr-demos/drill-pcap-format/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/mapr-demos/drill-pcap-format/issues/2/comments","events_url":"https://api.github.com/repos/mapr-demos/drill-pcap-format/issues/2/events","html_url":"https://github.com/mapr-demos/drill-pcap-format/issues/2","id":221154361,"number":2,"title":"Any reason why we do not see mesasges with IP6 addresses?","user":{"login":"tgrall","id":541250,"avatar_url":"https://avatars0.githubusercontent.com/u/541250?v=3","gravatar_id":"","url":"https://api.github.com/users/tgrall","html_url":"https://github.com/tgrall","followers_url":"https://api.github.com/users/tgrall/followers","following_url":"https://api.github.com/users/tgrall/following{/other_user}","gists_url":"https://api.github.com/users/tgrall/gists{/gist_id}","starred_url":"https://api.github.com/users/tgrall/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tgrall/subscriptions","organizations_url":"https://api.github.com/users/tgrall/orgs","repos_url":"https://api.github.com/users/tgrall/repos","events_url":"https://api.github.com/users/tgrall/events{/privacy}","received_events_url":"https://api.github.com/users/tgrall/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"Vlad-Storona","id":13219901,"avatar_url":"https://avatars3.githubusercontent.com/u/13219901?v=3","gravatar_id":"","url":"https://api.github.com/users/Vlad-Storona","html_url":"https://github.com/Vlad-Storona","followers_url":"https://api.github.com/users/Vlad-Storona/followers","following_url":"https://api.github.com/users/Vlad-Storona/following{/other_user}","gists_url":"https://api.github.com/users/Vlad-Storona/gists{/gist_id}","starred_url":"https://api.github.com/users/Vlad-Storona/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Vlad-Storona/subscriptions","organizations_url":"https://api.github.com/users/Vlad-Storona/orgs","repos_url":"https://api.github.com/users/Vlad-Storona/repos","events_url":"https://api.github.com/users/Vlad-Storona/events{/privacy}","received_events_url":"https://api.github.com/users/Vlad-Storona/received_events","type":"User","site_admin":false},"assignees":[{"login":"Vlad-Storona","id":13219901,"avatar_url":"https://avatars3.githubusercontent.com/u/13219901?v=3","gravatar_id":"","url":"https://api.github.com/users/Vlad-Storona","html_url":"https://github.com/Vlad-Storona","followers_url":"https://api.github.com/users/Vlad-Storona/followers","following_url":"https://api.github.com/users/Vlad-Storona/following{/other_user}","gists_url":"https://api.github.com/users/Vlad-Storona/gists{/gist_id}","starred_url":"https://api.github.com/users/Vlad-Storona/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Vlad-Storona/subscriptions","organizations_url":"https://api.github.com/users/Vlad-Storona/orgs","repos_url":"https://api.github.com/users/Vlad-Storona/repos","events_url":"https://api.github.com/users/Vlad-Storona/events{/privacy}","received_events_url":"https://api.github.com/users/Vlad-Storona/received_events","type":"User","site_admin":false}],"milestone":null,"comments":4,"created_at":"2017-04-12T05:20:46Z","updated_at":"2017-04-24T13:12:19Z","closed_at":"2017-04-24T13:12:19Z","body":"Using\r\nthe https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=airtunes-1.pcap\r\n\r\nQuery:\r\n```\r\nselect *\r\nfrom dfs.`data`.`airtunes.pcap`\r\nlimit 10\r\n```\r\n\r\nThe fist lines are:\r\n```\r\n+-------+----------+--------------------------+-----------------+-----------------+-----------+-----------+----------------+-------+\r\n| Type  | Network  |        Timestamp         |     dst_ip      |     src_ip      | src_port  | dst_port  | packet_length  | data  |\r\n+-------+----------+--------------------------+-----------------+-----------------+-----------+-----------+----------------+-------+\r\n| TCP   | 1        | 2012-03-29 22:05:41.808  | /192.168.3.123  | /192.168.3.107  | 51594     | 5000      | 78             | []    |\r\n| TCP   | 1        | 2012-03-29 22:05:41.808  | /192.168.3.107  | /192.168.3.123  | 5000      | 51594     | 78             | []    |\r\n| TCP   | 1        | 2012-03-29 22:05:41.808  | /192.168.3.123  | /192.168.3.107  | 51594     | 5000      | 66             | []    |\r\n+-------+----------+--------------------------+-----------------+-----------------+-----------+-----------+----------------+-------+\r\n```\r\n\r\nWhen I use Wiredshark I see 2 header lines like that:\r\n```\r\n1\t0.000000\tApple_ed:bf:13\tBroadcast\tARP\t60\tWho has 192.168.3.123? Tell 192.168.3.107\r\n2\t0.000021\tPcsSyste_7b:10:af\tApple_ed:bf:13\tARP\t42\t192.168.3.123 is at 08:00:27:7b:10:af\r\n```\r\nAny reason I do not see it into the Drill query? (Maybe related to my lack of knowledge)\r\n"}}
{"actor":{"display_login":"dmitriyHavrilovich"}}