metron-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jon Zeolla (JIRA)" <>
Subject [jira] [Commented] (METRON-348) bro-plugin-kafka is missing an important update
Date Sat, 10 Sep 2016 12:29:20 GMT


Jon Zeolla commented on METRON-348:

One note - if you use the logs-to-kafka.bro provided via bro/bro-plugins it will send IPv6
traffic to Metron, which will cause a few things to fail, primarily the enrichments.  Because
of that, I had to tweak logs-to-kafka.bro so that it won't send IPv6 (see attached file).

If we just pull or suggest to pull from bro/bro-plugins it will cause issues until METRON-293,
METRON-285, and METRON-286 are addressed.  Thoughts?  

> bro-plugin-kafka is missing an important update
> -----------------------------------------------
>                 Key: METRON-348
>                 URL:
>             Project: Metron
>          Issue Type: Bug
>            Reporter: Jon Zeolla
>             Fix For: 0.2.1BETA
>         Attachments: logs-to-kafka.bro
>   Original Estimate: 2h
>  Remaining Estimate: 2h
> Metron's bro-plugin-kafka (
is missing an important update (
 I have opened a ticket with the bro devs in order to seek a long term resolution to this
issue (  
> My suggestion was to have the bro team update the bro/bro-plugins repo to turn folders
(plugins) into individual branches so that they could be referenced and updated easily in
Metron and other projects as a submodule.  I was going to wait to hear back before filing
a PR, but I'm not against a short term fix of simply updating kafka/src/ and

This message was sent by Atlassian JIRA

View raw message