metron-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From nickwallen <>
Subject [GitHub] incubator-metron pull request: METRON-39 Replay PCAP Data
Date Fri, 19 Feb 2016 06:06:53 GMT
GitHub user nickwallen opened a pull request:

    METRON-39 Replay PCAP Data

    Created the 'pcap-replay' service to support functional, load and performance testing
of Metron.  
    To replay network traffic simply add one or more pcap file(s) to the host.  The service
will auto-magically and continuously replay those files to the specified network interface.
 All hosts on the same subnet listening in promiscuous mode will be able to 'see' the replayed
network traffic.
    Altered the Vagrant/Virtualbox configuration to allow the guest OS to switch the network
interface to promiscuous mode.  Updated the deployment of each sensor to turn on promiscuous
mode before startup.
    Added a setting to define for all sensors the network interface that is used as a span/mirror
port for sniffing network traffic.
    Added some missing prerequisites/dependencies for various services that are deployed by
Ansible.  These only come to light when re-ordering or changing the deployment process.
    Minimized the number of variables in Ansible that need defined at the 'global' level under

You can merge this pull request into a Git repository by running:

    $ git pull METRON-39

Alternatively you can review and apply these changes as the patch at:

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #25


If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at or file a JIRA ticket
with INFRA.

View raw message