changefields - Retype, rename, and remove fields from the stream.
A record stream
A record stream with names and types of fields changed, or certain fields removed
This tool allows you to change the name and datatype of each field in the stream. It can also be used to remove fields from the stream.
The available datatypes are:
| BLOB | BLOB - This datatype can contain large sequences of data of any kind. |
| STRING32 | A 31 character long text. |
| STRING128 | A 127 character long text. |
| STRING512 | A 511 character long text. |
| INT32 | A 32-bit signed integer in the range -2147483648 to 2147483647. |
| UINT32 | A 32-bit signed integer in the range 0 to 4294967295. |
| INT64 | A 64-bit signed integer. |
| UINT64 | A 64-bit unsigned integer. |
| FLOAT | A 64-bit floatingpoint number. |
| IPADDR | An ipaddress stored in a 32-bit unsigned integer. |
| TIMESTAMP | A timestamp stored in a 64-bit floatingpoint number. |
Most datatype conversions work as expected. However a few special conversion rules apply:
This conversion formats the IP address in dotted quad format, eg. 192.168.1.1
Converted to format like 20030423 15:56:10
Converted to format like Wed Apr 23 15:56:10 UTC 2003
Byte swapped little-endian to big-endian
Converted from dotted-quad to 4 byte integer
Byte swapped little-endian to big-endian
Converted to the size of the blob
For each field in the record stream, it is possible to type in a new name and/or change the datatype. A * to the right of a field description signifies that the field is changed in some way.