20 Nov 16 04:22, you wrote to me:

 ml>> i am not ignoring this... i plan on digging into it

 MK> Take your time, I am in no rush as I have (had) it all working at one
 MK> time or another.  For my part I just want verification to it's
 MK> validity given the lack of published standards.

there's only one part that i question but we'll see what comes up...

 ml>> to play with this code...

 MK> Not much to play with.  It's missing the conversion to binary but that
 MK> wouldn't help much as far as identification as valid data as per the
 MK> three types.

yeah, i want that conversion to binary so i can see it with some pkt readers...
i'm a rather visual person and see things better when they are in their field
positions inside the final results... i have to pick and pluck and spin and
duck to count csv fields and try to remember what their field names are...
seeing them listed in a pkt tool does two things... the most important being
that it shows that other software can properly read the results ;)

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it
wrong...
... Laughing helps. It's like jogging on the inside.
---