Re: Remove duplication for resolved addresses

[Pascal Quantin <pascal.quantin () gmail com>]

2015-09-10 22:31 GMT+02:00 Guy Harris <guy () alum mit edu>:

> On Sep 10, 2015, at 1:05 PM, Pascal Quantin <pascal.quantin () gmail com>
> wrote:
>
> > Just a random thought (as I'm far from being a script expert). In case
> only one of the 2 IP address is resolved, would it be harder to parse?
> >   Src: 192.0.2.1, Dst: localhost (127.0.0.1)
>
> Is it harder to parse that or
>
>         <packet>
>         <section>15</section>
>         <section>7.646900</section>
>         <section>192.0.2.1</section>
>         <section>127.0.0.1</section>
>         <section>{protocol}</section>
>         <section>{info}</section>
>         </packet>
>
> (PSML) or
>
>         192.0.2.1,127.0.0.1
>
> (-T fields -E separator=, -e _ws.col.Source -e _ws.col.Destination)?
>
> Perhaps the default packet detail output should be oriented towards being
> read by humans, with the output of -T psml, -T ldml, and -T fields being
> what you use if you want it to be read by software?

A very valid argument ! :)

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe