diff --git a/README.md b/README.md index fd85b79..9299f29 100644 --- a/README.md +++ b/README.md @@ -21,7 +21,7 @@ Process is as follows: - Queried data gets queried in chunks afterwards Currently, ethernet, IPv4, IPV6, TCP, UDP and ARP/RARP network protocols are handled. -Because of testing purposes, layout of the table is serialized json. Only procotols inside the packet are not null inside serialized json data. +Because of testing purposes, layout of the table is serialized json. Table layout is somewhat "dynamic". Procotols inside the parsed packet are not null inside serialized json data, all others are. A query may look like this `select packet from json_dump where packet->>'ipv4_header' is not null;` Speaking of serialization: After profiling it turns out that ~20% of cpu time is used for serialization to json. This, of course, could be saved completely.