ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: RE: [Ethereal-dev] about the psml format.I think it is not the best

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Fulvio Risso" <fulvio.risso@xxxxxxxxx>
Date: Wed, 30 Jun 2004 11:06:50 +0200
Hi Li.

> -----Original Message-----
> From: ethereal-dev-bounces@xxxxxxxxxxxx
> [mailto:ethereal-dev-bounces@xxxxxxxxxxxx]On Behalf Of Li Haijiang
> Sent: mercoledì 30 giugno 2004 10.40
> To: ethereal-dev@xxxxxxxxxxxx
> Subject: [Ethereal-dev] about the psml format.I think it is not the best
>
>
> The psml generated by the ethereal is like this:
> ----------------------------
> <structure>
> <section>No.</section>
> <section>Time</section>
> <section>Source</section>
> <section>Destination</section>
> <section>Protocol</section>
> <section>Info</section>
> </structure>
>
> <packet>
> <section>1</section>
> <section>15:39:42.508837</section>
> <section>61.172.247.211</section>
> <section>178.100.101.106</section>
> <section>TCP</section>
> <section>7201 &gt; 3234 [PSH, ACK] Seq=3005779493 Ack=1025335966 Win=65462
> Len=6</section>
> </packet>
> -----------------------
> So I think,This format is better.The format is like this:
> --------------
> <packet>
> <No>1</No>
> <Time>15:39:42.508837</time>
> <Source>61.172.247.211</Source>
> <Destination>178.100.101.106</Destination>
> <Protocol>TCP</Protocol>
> <Info>7201 &gt; 3234 [PSH, ACK] Seq=3005779493 Ack=1025335966 Win=65462
> Len=6</info>
> </packet>
> --------------
> Can you agree with me?

No, I don't agree, because I don't want to have predefined tags within the
PSML file. In the original proposal, the meaning of each section is defined
within the 'structure', allowing arbitrary packet summaries to be generated
without changing the structure (i.e. the tags) of the PSML file.


> so I wonder the ethereal can generate this
> format file?
> Can you give me some directions?
> Thanks.

Cheers,

	fulvio