Second parsing step has been removed
· One min read
For years, Spider has been able to parse a second time TCP sessions
- For which Packets, TCP sessions and Parsing log was saved in Elasticsearch
- For which some Packets have been missing when parsing
I've decided to remove this feature as:
- Most often Packets and Tcp sessions are not saved anymore
- Streaming parsing quality is now excellent
- It was one useless service flying around in the cluster
This parsing step has then been removed from the deployed cluster, the configuration and documentation!