Re: [OPSAWG] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt

Michael Tuexen <tuexen@fh-muenster.de> Wed, 30 September 2020 08:19 UTC

Return-Path: <tuexen@fh-muenster.de>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2809C3A12DF for <opsawg@ietfa.amsl.com>; Wed, 30 Sep 2020 01:19:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.624
X-Spam-Level:
X-Spam-Status: No, score=-1.624 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.274, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mQcJbd7vODJN for <opsawg@ietfa.amsl.com>; Wed, 30 Sep 2020 01:19:18 -0700 (PDT)
Received: from drew.franken.de (mail-n.franken.de [193.175.24.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA0DC3A12DE for <opsawg@ietf.org>; Wed, 30 Sep 2020 01:19:17 -0700 (PDT)
Received: from mb.fritz.box (ip4d16e8c9.dynamic.kabel-deutschland.de [77.22.232.201]) (Authenticated sender: macmic) by mail-n.franken.de (Postfix) with ESMTPSA id A911B77937431; Wed, 30 Sep 2020 10:19:12 +0200 (CEST)
From: Michael Tuexen <tuexen@fh-muenster.de>
Message-Id: <795D34D2-17EF-4168-8235-F2B633B32CAD@fh-muenster.de>
Content-Type: multipart/signed; boundary="Apple-Mail=_D637EEFB-836B-436D-B782-DBA838485CE5"; protocol="application/pkcs7-signature"; micalg=sha-256
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\))
Date: Wed, 30 Sep 2020 10:19:11 +0200
In-Reply-To: <B8F9A780D330094D99AF023C5877DABAADA34718@dggeml531-mbs.china.huawei.com>
Cc: Michael Richardson <mcr@sandelman.ca>, "pcap-ng-format@winpcap.org" <pcap-ng-format@winpcap.org>, "opsawg@ietf.org" <opsawg@ietf.org>, Jasper Bongertz <jasper@packet-foo.com>, "tcpdump-workers@lists.tcpdump.org" <tcpdump-workers@lists.tcpdump.org>, Fulvio Risso <fulvio.risso@polito.it>, Guy Harris <gharris@sonic.net>, Gerald Combs <gerald@wireshark.org>
To: Qin Wu <bill.wu@huawei.com>
References: <B8F9A780D330094D99AF023C5877DABAADA34718@dggeml531-mbs.china.huawei.com>
X-Mailer: Apple Mail (2.3608.120.23.2.4)
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/rxJbqeWlH2WiPvrFbWhwmSC8i4Y>
Subject: Re: [OPSAWG] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 08:19:21 -0000

> On 30. Sep 2020, at 04:14, Qin Wu <bill.wu@huawei.com> wrote:
> 
> Hi, two Michaels:
> Can you clarify what functionalities is missed for more modern applications? Since it is enhancement to libpcap, do you expect all the 
The file format is extensible and allows to include packets from multiple interfaces
not having the same physical layer. I can also contain information not related to
a particular packet like how many packets where dropped between two packets, how
many packets where dropped on which interface during capturing, which capture
filters where used, ...

I guess this kind of information could be added to the abstract of the document.
> future packet capture tools support the format defined in this draft?
For Wireshark it is the default.

Best regards
Michael
> 
> -Qin
> -----邮件原件-----
> 发件人: OPSAWG [mailto:opsawg-bounces@ietf.org] 代表 Michael Richardson
> 发送时间: 2020年9月29日 4:31
> 收件人: Michael Tuexen <tuexen@fh-muenster.de>de>; pcap-ng-format@winpcap.org; opsawg@ietf.org; Jasper Bongertz <jasper@packet-foo.com>om>; tcpdump-workers@lists.tcpdump.org; Fulvio Risso <fulvio.risso@polito.it>it>; Guy Harris <gharris@sonic.net>et>; Gerald Combs <gerald@wireshark.org>
> 主题: Re: [OPSAWG] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt
> 
> 
> Michael Tuexen <tuexen@fh-muenster.de> wrote:
>>> internet-drafts@ietf.org wrote:
>>>> Diff: https://www.ietf.org/rfcdiff?url2=draft-tuexen-opsawg-pcapng-02
>>> 
>>> Hi, I have converted the xml to markdown.
> 
>> Why? If we want to publish this, it will be published in xmlv3. So
>> better to use that format earlier...
> 
> It's so so so much easier to maintain and update and get contributions.
> github will render it directly....
> 
> If you object strongly, we can stick to XML.
> 
>>> The results in the diff are okay, but actually the conversion is not
>>> complete as I cheated and left the tables as preformatted figures, and
>>> there are many internal references that I have no yet updated.
>>> 
>>> The xml file had a long list of URLs as references, many of which were
>>> duplicated.  I will be going through and fixing those in the next week
>>> or so.
>>> 
>>> This work has been discussed on and off in OPSAWG, but at this point I
>>> am going to suggest that the document just go through the Independant
>>> Submission Editor.
> 
>> Do we want to finally publish that? Up to now, I think the point was to
>> find a home where it is substantially discussed and improved...
> 
> If we can get OPSAWG to adopt it, great.
> I'm just not holding my breath.
> 
> --
> ]               Never tell me the odds!                 | ipv6 mesh networks [
> ]   Michael Richardson, Sandelman Software Works        |    IoT architect   [
> ]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [
>