Re: [OPSAWG] Red: RFC8907 (was: Re: Can we please adopt draft-tuexen-opsawg-pcapng?)

Eliot Lear <lear@cisco.com> Fri, 13 November 2020 06:18 UTC

Return-Path: <lear@cisco.com>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C94973A1558 for <opsawg@ietfa.amsl.com>; Thu, 12 Nov 2020 22:18:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.6
X-Spam-Level:
X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id quLTi8tybkHh for <opsawg@ietfa.amsl.com>; Thu, 12 Nov 2020 22:18:45 -0800 (PST)
Received: from aer-iport-1.cisco.com (aer-iport-1.cisco.com [173.38.203.51]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93E123A13CC for <opsawg@ietf.org>; Thu, 12 Nov 2020 22:18:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10589; q=dns/txt; s=iport; t=1605248324; x=1606457924; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=Uux4TLYAFuLhhItoTR8b3GrFILz48cl6ox51DgDriC4=; b=KZlJ+7+tTOk383QQ9+L7dZ46DG/rIMQZkvvnoWStdlV+bHp/TY9/Euqn SHnwO4ZhpZkYNcvSiHbhNda9hWAi/Q1zpCc/0ZxSe2IgtXMxBZavjj11a SGoTG+wI2hP1xLs/qnwOH3hKMuzUxVtUOHPGl7wuk6jvQTDcx8NmRNmns I=;
X-IPAS-Result: A0AxBAA1JK5f/xbLJq1iHQEBAQEJARIBBQUBgg+DcwEgEi6EPYkFiB+UFIgZCwEBAQ0BAS8EAQGBVYJ1AoIcJjgTAgMBAQEDAgMBAQEBBQEBAQIBBgRxhW2FcgEBAQECASNRBQULCxgnAwICRhEGE4Mmgmcgrxh2gTKFV4R7gTiNWoIAgREnHIJPPoEEg3CCYTOCLASQRCynPIJ3gxqXegMfgxmKFYVMjn2wPoNjAgQGBQIVgWsjgVczGggbFWUBgj4+EhkNjjcfjhNAAzA4AgYBCQEBAwmOSAEB
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos; i="5.77,474,1596499200"; d="scan'208,217"; a="31083345"
Received: from aer-iport-nat.cisco.com (HELO aer-core-2.cisco.com) ([173.38.203.22]) by aer-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 13 Nov 2020 06:18:40 +0000
Received: from ams3-vpn-dhcp5496.cisco.com (ams3-vpn-dhcp5496.cisco.com [10.61.85.119]) by aer-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id 0AD6IdfL026177 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Fri, 13 Nov 2020 06:18:40 GMT
From: Eliot Lear <lear@cisco.com>
Message-Id: <CE8A4154-80AE-45CB-96E4-D7864832705A@cisco.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_8BCF634E-D3AA-4AE1-98D1-0E3A7B1DEAF2"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Date: Fri, 13 Nov 2020 07:18:38 +0100
In-Reply-To: <3903.1605228892@localhost>
Cc: opsawg <opsawg@ietf.org>
To: Michael Richardson <mcr+ietf@sandelman.ca>
References: <20201111080817.g4oc75o5ufwtxd5p@anna.jacobs.jacobs-university.de> <873CA76D-E744-45CA-A82C-1228798619CB@tzi.org> <20201111092125.GF39343@faui48f.informatik.uni-erlangen.de> <079EB1DE-694E-403B-A9C5-F4ECD28DBC59@cisco.com> <20201111150739.GG39343@faui48f.informatik.uni-erlangen.de> <e195e3de-5d4a-8416-7e36-c17cec32af03@gmail.com> <9215_1605164101_5FACDC45_9215_16_1_787AE7BB302AE849A7480A190F8B933031578800@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <758CFA2F-E353-409D-987C-000C23EA0EC3@tzi.org> <22094_1605167175_5FACE847_22094_64_1_787AE7BB302AE849A7480A190F8B933031578836@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <9C197251-812E-4687-A585-4EF8B702E466@cisco.com> <20201112220244.GD39343@faui48f.informatik.uni-erlangen.de> <EF3EB8B3-3ABF-4854-95DB-49BDB6C953BD@deployingradius.com> <3903.1605228892@localhost>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
X-Outbound-SMTP-Client: 10.61.85.119, ams3-vpn-dhcp5496.cisco.com
X-Outbound-Node: aer-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/BsI8EfmU7VfCt5e5krqIcxxcRfw>
Subject: Re: [OPSAWG] Red: RFC8907 (was: Re: Can we please adopt draft-tuexen-opsawg-pcapng?)
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Nov 2020 06:18:47 -0000

We need to back away from using bureaucratic process that will chase away developers for no good reason.  Do you think Guy Harris has the time or inclination to do this twice for no good reason?

Even broken as it was, TACACS+ was NOT an ISE document.  Neither was JSON.  There is NO precedent for a spec we want to move forward as an IETF spec to go through the ISE.  If it’s within this group’s purview, we should take it.  The ISE is a relief valve, not a go to.  We would be misusing that process, and I would likely object to doing so.

If people insist that the document should be informational, fine, but even that is a lie.  This is an evolving de facto standard, and not recognizing it as de jure seems silly.  Worse, by forcing people down this road, we are doubling the amount of work to get to a proposed standard.  And for what?  Do we really think we’re going to change that much even in that process?  Looking back it was even silly for JSON to have gone through informational.  It was a waste of everyone’s time.  The final stage was what was important, and the mods were modest.

TACACS+ was different.  The IETF would not have endorsed TACACS+ in its current form, but having it written was important for both implementors and deployments to understand what they were seeing a lot of on the wire.

Recognize why the rules exist and use them appropriately.  This should go forward as a PS candidate.

Eliot

> On 13 Nov 2020, at 01:54, Michael Richardson <mcr+ietf@sandelman.ca <mailto:mcr+ietf@sandelman.ca>> wrote:
> 
> Signed PGP part
> 
> Alan DeKok <aland@deployingradius.com <mailto:aland@deployingradius.com>> wrote:
>>> (or who read THEDRAFT), but i remember older RFCs that clearly state when a protocol
>>> is a proprietary vendor protocol not developed by the IETF. I think this RFC should
>>> have done it too for clarity. BY not writing it clearly, it looks like a particular
>>> vendor endorsement by IETF in an inappropriate fashion.
> 
>> That's a reasonable point.  But the doc is "Informational", and the
>> protocol has a 20+ year history.  So it's pretty clear where it came
>> from.  And, that documentation does not imply endorsement.
> 
> Hi, so PCAPNG does not have a 20+ year history.  More like 6-8 year.
> *PCAP* does have ~30 year history.
> 
> MORTON, ALFRED C (AL) <acm@research.att.com <mailto:acm@research.att.com>> wrote:
>> I have a suggestion:  the pcapng work proposal goes forward as *two drafts*:
> 
>> 1. a draft intended as an Independent Submission RFC to describe
>> pcapng/2010 *as-is*.
> 
> That would be draft-gharris-opsawg-pcap-00, and I will bring it to ISE.
> If this WG would prefer to adopt is as a set, that's fine with me.
> There are IANA Registries that could move around.
> 
>> 2. a proposal for a WG draft, to collect all the new/good ideas while
>> (probably) maintaining backward compatibility with pcapng/2010 and the
>> utilities that read/write it.
> 
> That would be draft-tuexen-opsawg-pcapng-02
> 
>> The WG helps prepare *both* drafts, but when 1. is deemed complete and
>> accurate it heads off to the Independent Stream.
> 
>> I have zero skin in this game, except that I capture packets whenever I need to...
> 
> I have this image of Cookie Monster.
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca <mailto:mcr+IETF@sandelman.ca>>   . o O ( IPv6 IøT consulting )
>           Sandelman Software Works Inc, Ottawa and Worldwide
> 
>