On Thursday 30 Oct 2003 9:49 pm, Jason House wrote: > Let me answer with questions ;) > > What % of the protocols that ethereal dissects... > ...place every registered field in every dissected packet? (ie udp) > ...place at most one copy of a field in every dissected packet? > (udp would qualify if it wasn't for udp.port) > ...contain variable length lists of fields? (ie. ospf) > ...have many fields that are sometimes used? (ie. ospf's lsa's)
Howabout dumping to XML, and letting users use other tools if they want SQL. Those tools exist (IIUC), and XML can handle the complexity. -- Richard Urwin