From owner-freebsd-net Sun Jan 31 22:19:31 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA28809 for freebsd-net-outgoing; Sun, 31 Jan 1999 22:19:31 -0800 (PST) (envelope-from owner-freebsd-net@FreeBSD.ORG) Received: from whistle.com (s205m131.whistle.com [207.76.205.131]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA28801 for ; Sun, 31 Jan 1999 22:19:30 -0800 (PST) (envelope-from archie@whistle.com) Received: (from smap@localhost) by whistle.com (8.7.5/8.6.12) id WAA20474; Sun, 31 Jan 1999 22:18:58 -0800 (PST) Received: from bubba.whistle.com( 207.76.205.7) by whistle.com via smap (V2.0) id xma020472; Sun, 31 Jan 99 22:18:40 -0800 Received: (from archie@localhost) by bubba.whistle.com (8.8.7/8.6.12) id WAA25673; Sun, 31 Jan 1999 22:18:40 -0800 (PST) From: Archie Cobbs Message-Id: <199902010618.WAA25673@bubba.whistle.com> Subject: Re: netgraph... In-Reply-To: from Richard Wackerbarth at "Jan 31, 99 11:17:27 pm" To: rkw@dataplex.net (Richard Wackerbarth) Date: Sun, 31 Jan 1999 22:18:40 -0800 (PST) Cc: net@FreeBSD.ORG, phk@critter.freebsd.dk, julian@whistle.com X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Richard Wackerbarth writes: > Is it so "complicated" to export a template (eg. format string) > in response to a single call to the node? That wouldn't be, but the worry is that templates might not be a powerful enough "language" to cover all the possibilities. Remember, the goal is to transate an ASCII string containing arbitrary "argc, argv" type information into an arbitrary binary format that might contain bitflags, etc. For example, look at the ipfw(8) program's parser. Julian's already mentioned the possibility of writing an "ipfw" node. Any "language" to do this would have to be so complicated that it would essentially be a programming language, so why not just export a perl script? :-) (that was a rhetorical question :-) > And, using your scheme, how do I compute the time interval between two > messages? Do you propose to convert ALL packet fields for EVERY packet in > a dump? Even if I care about only one or two fields? The translation to and from ASCII could be done off-line, like the way tcpdump can do it, for example. In general, control messages will always be in binary format until/unless a human wants to see them. Then they can be translated in "human time". -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message