On Oct 27, 2003, at 11:43 PM, Guy Harris wrote:
If somebody's interested in "productizing" it (making it apply to the
current CVS version of Ethereal, removing bogosities and C++ comments,
and documenting it in the man page - documenting it enough to let
people know what it does and doesn't do, what fields it dumps, etc.),
or even making a more general version that doesn't hardwire stuff into
the dissectors, they should download FLAG and look at the patch.
Another possibility, suggested by another message you sent, would be to
do it as a tap; you said
Currently I use tethereal with the "-z proto,colinfo" option when I
need to export some specific fields to spreadsheet or database
(but then you normally need some script or program to get the data
into the right format).
which suggests that it might be interesting to do it as a tap, if a way
of specifying a template for the SQL to be generated (I'm not an SQL
expert, but Michael Cohen's message
http://www.ethereal.com/lists/ethereal-dev/200303/msg00214.html
seems to indicate that there'd be a prolog that sets up the schema and
then per-packet items to insert rows into various tables, one row per
packet - the template might indicate what tables are to be created,
what the columns in the table are and what registered fields they
correspond to - although now you have to worry about more than one
instance of a field being in a packet, etc.).