[sip-clf] New CLF Syntax draft (text with index)

[Adam Roach <[e-mail]>]

This version defines a text format in which each record is composed of 
two lines in a log file. The first line is primarily pointers into the 
second line. The second line contains the actual logged fields, 
separated by tab characters.

This approach retains the fast-search capabilities that I've been 
advocating, while allowing the use of simple, text-based tools, as Vijay 
has been promoting. This hybrid approach does come with a slight 
increase in log file size; for example, writing out the same 100,000 log 
entries in each of the three formats proposed so far:

   - Text:   25 Mb
   - Binary: 29 Mb
   - Hybrid: 37 Mb

This is about a 20% premium over the binary format, and a 48% premium 
over the text format. Speed of generation should be on the same order of 
speed as the other two versions, and speed of processing should be 
approximately the same as processing binary.

The new version of the document can be found here:

http://tools.ietf.org/html/draft-roach-sipping-clf-syntax-01

/a