Aggregate class shown as attributes

[gildasio]

Hi, there is some aggregate class that is shown as attributes of another class, for example UserId where name is a aggregate class but is shown as a UserId attribute.

There are others examples like that.

Is it propurseful?

[Moutix]

Yep I took the liberty to display them the same way (here: https://github.com/ningirsu/idmef_parser/blob/master/graph_generator.rb#L86)

Basically when I did it, I supposed that this information was only useful if we want to serialize the IDMEF message as XML, and not for understanding the shema.

For instance if you want to send IDMEF message as JSON you will probably represent attributes and aggregates the same way