Re: Proposed new pcap format

[Jefferson Ogata <Jefferson.Ogata () noaa gov>]

Ronnie Sahlberg wrote:
> I dont see really the benefit from using XML at all.

Usually I find that people who say that haven't used XML for anything significant.

> It is just another file format and other well defined TLV fileformats are
> just as extensible.
> The only aplications ever reading pcap files are always going to do that
> through libpcap anyway so
> XML or a better suited binary fileformat would be invisible to the
> application anyway.

As long as pcap files are a fixed binary format, then yes, the only applications 
reading them are going to do so through libpcap, pretty much by definition: i.e. 
your statement is a tautology.

If you store in XML, then many applications could read pcap files, because they 
wouldn't /have/ to use libpcap.

> I think XML is the 21st centurys response to C++.

I have no idea what you mean by that...

--
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.