[dns-operations] DNS Traffic Archive Protocol

[Miek Gieben]

[ Quoting Bedrich Kosata in "Re: [dns-operations] DNS Traffic Ar"... ]
> be suitable for long term storage of DNS traffic, mainly from high
> load servers, such as the TLD authoritative servers, etc.
> Because the data throughput on such servers is very high, we strive
> to make the format as compact as possible, while maintaining all the
> important data. We use the following strategies to reach this goal:

nice idea, but I'm missing the rationale *why*:

    pcapdump -i eth0 -w eth0-dump ; bzip2 -9 eth0-dump

isn't good enough?

Kind regards,
Miek Gieben