-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Guy" == Guy Harris <[EMAIL PROTECTED]> writes: Guy> Along those lines, Tethereal currently offers the ability to Guy> output either one-line summary information, a detailed Guy> multi-line parse, *or* PDML XML-based dissection for packets. Guy> See Guy> Guy> http://analyzer.polito.it/30alpha/docs/dissectors/PDMLSpec.htm Guy> for the PDML specification. I think it is an abuse of XML... nothing is actually marked up. Everything seems to be given as attributes, i.e.: <field name="verhlen" pos="15" show="45" showname="Version and header Length" size="1" value="45"> rather than: <field name="verhlen" pos="15" show="45" showname="Version and header Length" size="1">0x45</field> It does use the container mechanism to do sub-structure, but I'm not convinced that I like it this. It is worth looking at. How widespread is PDML? - -- ] "Elmo went to the wrong fundraiser" - The Simpson | firewalls [ ] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[ ] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/mcr/ |device driver[ ] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Finger me for keys iQCVAwUBQOMbXoqHRg3pndX9AQFraQQAsLtSGHDqsspYb1l6K7ysaX6zJ4u02nNl RZ+g/FKc3oFtCmj0qKi7+Q4phgd9Qj0RJ7Wz7JaYgZbX6/iZtY2GO46BVRqbPxU6 8o0VaqIVSjgPsOr/xupwOSgmQkEhd37sEsTqkr2JmI1ZdJtnYgDhhw5Y6Tzju2hp muDJNgZssGo= =zdsq -----END PGP SIGNATURE----- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.