IETF Logo Mail Archive

Re: [OPSAWG] PCAPNG standardisation

Benoit Claise <bclaise@cisco.com> Wed, 16 July 2014 15:29 UTC

Return-Path: <bclaise@cisco.com>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42EAC1B2881 for <opsawg@ietfa.amsl.com>; Wed, 16 Jul 2014 08:29:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.152
X-Spam-Level:
X-Spam-Status: No, score=-15.152 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jk4Zvea3yNQn for <opsawg@ietfa.amsl.com>; Wed, 16 Jul 2014 08:29:51 -0700 (PDT)
Received: from aer-iport-4.cisco.com (aer-iport-4.cisco.com [173.38.203.54]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B35FD1B2A93 for <OPSAWG@ietf.org>; Wed, 16 Jul 2014 08:29:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1134; q=dns/txt; s=iport; t=1405524591; x=1406734191; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=hHKaSbv0WLSnfvq9cPjdeqSSxJrbGnhP1XUguG+cJF8=; b=l0hwiVtgEJE8kxHEPvrHhUvs3dzayVy5zz+4pAmNBYXMb1VvZxyLe44q Q6BZ1OK9njwRkgsSNeoOPuqFx69uE4jWh35lUOblZ1Lz8mQKvdyWSwpUh PSt9VB9hbuC0nDIPsCLps/WhobhCr689ShLzMd84yNczr1QywpVcqxXo0 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AqYEAFyZxlOtJssW/2dsb2JhbABZg2BXwiMKhm9TAYEfdYQEAQEEAQEBNRwaCgEQCxgJFg8JAwIBAgEVMAYBDAEFAgEBBYg5DcpuF49LB4RDAQSbHIcUjRODRjsvAQ
X-IronPort-AV: E=Sophos;i="5.01,673,1400025600"; d="scan'208";a="109386241"
Received: from aer-iport-nat.cisco.com (HELO aer-core-4.cisco.com) ([173.38.203.22]) by aer-iport-4.cisco.com with ESMTP; 16 Jul 2014 15:29:48 +0000
Received: from [10.60.67.84] (ams-bclaise-8913.cisco.com [10.60.67.84]) by aer-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id s6GFTl3J029805; Wed, 16 Jul 2014 15:29:48 GMT
Message-ID: <53C69A6B.1020604@cisco.com>
Date: Wed, 16 Jul 2014 17:29:47 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Michael Tuexen <Michael.Tuexen@lurchi.franken.de>, OPSAWG@ietf.org
References: <36334903-3B26-41FA-A9AE-35B5F74F88AC@lurchi.franken.de> <52D6582A-1740-4601-9ABC-FFCCC3847461@lurchi.franken.de>
In-Reply-To: <52D6582A-1740-4601-9ABC-FFCCC3847461@lurchi.franken.de>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/opsawg/X__Vz8wQbZBc74aWd5_rNF-i-9g
Cc: Jasper Bongertz <jasper@packet-foo.com>, Fulvio Risso <fulvio.risso@polito.it>, Guy Harris <guy@alum.mit.edu>
Subject: Re: [OPSAWG] PCAPNG standardisation
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Jul 2014 15:29:53 -0000

Hi Michael,

You wrote:

    One of the most accepted packet interchange
    formats is the one defined by libpcap, which is rather old and is
    lacking in functionality for more modern applications particularly
    from the extensibility point of view.

Can you please expand.

Regards, Benoit
> On 26 Jun 2014, at 19:29, Michael Tuexen <Michael.Tuexen@lurchi.franken.de> wrote:
>
>> Dear all,
>>
>> I have submitted an ID describing the default packet format format
>> used by Wireshark for saving capture files:
>> http://www.ietf.org/internet-drafts/draft-tuexen-opswg-pcapng-00.txt
> Wrong name... Use
> http://www.ietf.org/internet-drafts/draft-tuexen-opsawg-pcapng-00.txt
>> Is there any interest in the WG to work on this and improve it?
>>
>> Any comments are welcome!
>>
>> Best regards
>> Michael
>>
>> _______________________________________________
>> OPSAWG mailing list
>> OPSAWG@ietf.org
>> https://www.ietf.org/mailman/listinfo/opsawg
>>
> _______________________________________________
> OPSAWG mailing list
> OPSAWG@ietf.org
> https://www.ietf.org/mailman/listinfo/opsawg
>

v2.23.0 | Report a Bug | By Email