Start upgrade to darkstat-3.0.719.

[darkstat-debian] / export-format.txt

diff --git a/export-format.txt b/export-format.txt
index ca89f01..fbc2cd4 100644 (file)
--- a/export-format.txt
+++ b/export-format.txt
@@ -5,14 +5,15 @@ FILE HEADER 0xDA314159                              darkstat export format
     SECTION HEADER 0xDA 'H' 'S' 0x01                hosts_db ver1
         HOST COUNT 0x00000001                       1 host follows
         For each host:
-            HOST HEADER 'H' 'S' 'T' 0x03            host ver3
+            HOST HEADER 'H' 'S' 'T' 0x04            host ver4
             ADDRESS FAMILY 0x04                     Either 4 or 6.
               IPv4 ADDR 0x0A010101                  IPv4 10.1.1.1
-              or for 0x06:
+            or for 0x06:
               IPv6 ADDR 0x0000 0000 0000 0000 0000 0000 0000 0001
                                                     meaning IPv6 ::1
+            LASTSEEN 0x0000 0000 4800 0123          64-bit time_t meaning:
+                                                    2008-04-12 00:24:03 UTC
             MACADDR 0x001122334455                  00:11:22:33:44:55
-            LASTSEEN 0x0000000048000123 (time_t)    2008-04-12 00:24:03 UTC
             HOSTNAME 0x09 "localhost"               9 is the string length
             IN 0x0000000000123456                   Bytes in: 1193046
             OUT 0x0000000000789ABC                  Bytes out: 7903932
@@ -38,6 +39,8 @@ FILE HEADER 0xDA314159                              darkstat export format
                 PORT 0x0045                         tftp (port 69)
                     IN 0x0000000000000001           Bytes in: 1
                     OUT 0x0000000000000002          Bytes out: 2
+            REMOTE TCP DATA 't'                     (as above)
+            REMOTE UDP DATA 'u'                     (as above)
     SECTION HEADER 0xDA 'G' 'R' 0x01                graph_db ver1
         LAST_TIME (time_t as 64-bit uint)
         For each of 4 graphs: (60 seconds, 60 minutes, 24 hours, 31 days)
@@ -51,3 +54,5 @@ Host header version 1 is just version 2 without the lastseen time.
 
 Host header version 2 is just version 3 without the address family
 byte (or the possibility of an IPv6 address).
+
+Host header version 3 is just version 4 without the remote TCP and UDP ports.