Ethereal-users: Re: [Ethereal-users] Tethereal output format

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 9 Dec 2001 02:04:09 -0800
On Sun, Dec 09, 2001 at 01:50:16AM -0800, Guy Harris wrote:
> We may, at some point, provide a way to produce write the full protocol
> tree as output in a form more easily parseable by scripts (e.g., develop
> an XML DTD for it).

Or we may provide a mechanism for printing the values of selected fields
from the protocol tree for a packet, tab-separated, on a single line per
packet.

Note, however, that a packet may well have *more than one* IP address
and *more than one* IP protocol type, given all the amusing forms of
tunneling that exist (there exists one capture file with IP over Frame
Relay over GRE over IP over Ethernet, for example...), so providing such
a mechanism may require that it, for example, either provide only the
topmost value, or provide a way of specifying from which layer the value
should come.

There's also the problem that a given field may appear more than once at
the *same* level.