>
> Quoting Klaus Moeller ([EMAIL PROTECTED]) on Thu, Oct 21, 1999 at 12:06:51PM +0200:
[...]
> > Why not go with a simple 64 bit counter with microsecond resolution ?
> > That would give us support way into Y584K and is easy to process if
> > transmitted in binary form. The performance would be much better, as
> > the date could be processed directly, without the need to convert to
> > and from strings. And conversion from existing UNIX time values is
> > easy: Simply multiply by 1000,000
> >
> > This would even save some space (YYYYMMDDHHSS: 14 bytes).
>
> This is ok for the transfer over the wire, if a human readable
> format is used for storage. But I would prefer a readable format
> even on the wire. Makes for easier diagnostic in tcpdump/tcpshow.
tcpdump has already to do conversions from binary to ascii for stuff
like ip-adresses. Adding support for a new syslog protocol would be
easy to do and we can keep all the other benefits of a binary format.
Klaus
--
Klaus Moeller | mailto:[EMAIL PROTECTED]
DFN-CERT GmbH |
Vogt-Koelln-Str. 30 | Phone: +49(40)42883-2262
D-22527 Hamburg | FAX: +49(40)42883-2241
Germany | PGP-Key: finger [EMAIL PROTECTED]
