Wireshark · Ethereal-dev: Re: [Ethereal-dev] How to put the package summary infomation into database is better??

["Li Haijiang" <lhjiang@xxxxxx>]

Thanks for you reply.
Now I want to use the Postgresql on the linux platform that is free database.It
provides the connection library in c/c++.It is not difficult to connect the
Postgresql.and I will export the packet summary information(such as
ip.src,tcp.port,dst.ip,dst.port,data len...)into the database.Exporting these
information into database is good to the statistics work.It can statistic data for
the week or the month.
I now am not sure to how to do it.You suggestion of "export to pdml" looks like a
good idea.Can you give me some document of pdml? I will study it and then make the
decision how to do it.
Thanks


ÔÚÄúµÄÀ´ÐÅÖÐÔø¾­Ìáµ½:
>From: "Ulf Lamping" <ulf.lamping@xxxxxx>
>Reply-To: 
>To: "LiHaijiang" <lhjiang@xxxxxx>
>Subject: Re: [Ethereal-dev] How to put the package summary infomation into
database is better??
>
>Li Haijiang <lhjiang@xxxxxx>, schrieb am 17.06.04 09:53:10:
> > 
> > Now I want to put the captured package summary information into the
database.How
> > to do is better?I think there are two methods to do.One is I put it into the
> > database when the pacakge is being saved into the file.the other is I do it
after
> > saved into file,I read the saved file and get the package infomation from the
> > saved file,then put it into the database.But for the second method I don't
know
> > the format of the saved file by ethereal.I wonder which is better?Can you give
me
> > some suggestion?
> 
> The first option would be some kind of a new "export to database" function,
which was requested from other persons earlier before. As I don't have much
knowledge on databases, some questions remain here:
> -how can the database be accessed in a portable way (win32, linux, bsd,...), a
way I would guess is to use ODBC, which *might* be portable
> -which data should be exported to the database (which Ethereal fields should be
stored in which database fields), need a mechanism to choose the fields to export
in a flexible way here
> 
> The second option would save the packet data in Ethereal's libpcap file, and
convert the data into the database. When using Ethereal's common libpcap file
format, this would be difficult, as it only saves the raw binary packet data
without any additional dissected info. 
> 
> A better option would be to use the "export to pdml"  feature, as this will save
the data in a "preformatted" xml file, which will make conversion to the database
a lot easier.
> 
> Another option would be to create a new export function to an intermediate
format like the "comma seperated values" used by MS Excel and others.  This would
still required a mechanism to choose which Ethereal fields have to be exported to
the file (like in the first option).
> 
> Regards, ULFL
> 
> _______________________________________________________
> WEB.DE Video-Mail - Die E-Mail der nachsten Generation!
> Jetzt testen: http://freemail.web.de/?mc=021198
> 
> 
> 
> 
> 此邮件经过过æ»?
>