Re: [Qlog] qlog in pcap-ng format

Robin MARX <robin.marx@uhasselt.be> Wed, 19 May 2021 11:49 UTC

Return-Path: <robin.marx@uhasselt.be>
X-Original-To: qlog@ietfa.amsl.com
Delivered-To: qlog@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 858B93A096C for <qlog@ietfa.amsl.com>; Wed, 19 May 2021 04:49:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=uhasselt.be
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YtX0xd0sMZrV for <qlog@ietfa.amsl.com>; Wed, 19 May 2021 04:49:29 -0700 (PDT)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF55A3A0964 for <qlog@ietf.org>; Wed, 19 May 2021 04:49:28 -0700 (PDT)
Received: by mail-wr1-x433.google.com with SMTP id d11so13682722wrw.8 for <qlog@ietf.org>; Wed, 19 May 2021 04:49:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=uhasselt.be; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=GpneINT7xGFL66OZMJw73DoXg9znGGCN5ig+4L6ccuo=; b=ou6Gb1SIdJ4A90DRgWsI+bpLsZ9Xi9sFBtb+g/xfH2iTq30IoLmOffi992DFFkSlrn 5mfkmUWC+oicSMCMXYm0aceEjma1Apt4WsCV2SFPXgba1OThlVBnfOD9+qZpiIiKf8py mhOvW0aAK2/TkMHDmrL8/u4fBBVEPlEQvBZHY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=GpneINT7xGFL66OZMJw73DoXg9znGGCN5ig+4L6ccuo=; b=oT4gxibz7yQkTi2N9hAL3aBbIECdFQJP5TiSkFeyQEG42V4fQ/rkXfcRi9NpK5aZ1Y ylcSn5Zvlc8Zrq8KRis5zVrqFYqmb3/XK0vrWOVccOGezmNWCjf97aOU/WlXVdBqg9ol o3rSd4piNrQASFwZ3ntuRPr5N62CIW1BrPilgHpWeDs0gxB/k9u9IJ8nmD5v/a6LkJlU BHGxcwsleA2VueHHgszRinC72Kw397Fu7XyJZUv0fry31AU+r+pqgeIS2Ih9DSF8n/H8 k3G5UoArvmZw8aHX4Q+gnvTS9JuzocHqDqaJrzKu8LbKOdr7USsgypRMWe9DfwudGKgo xSsQ==
X-Gm-Message-State: AOAM530ta/kTDuk1fwQLn1BPcQHkt3f1c7ufJXnbngEO0MADwyhV1CM3 84Snd6YZHR62P/3bCWpkfC9Yyl/OYNGFQHZml1TFoA==
X-Google-Smtp-Source: ABdhPJxMtPddwm3Xpat+bHxX7jHokNXXyS1ccmPx4hPXM2cjToLIcO5f62E4gnACV2JbPm6DIaotOuuj8JTGgMqDsy8=
X-Received: by 2002:adf:e608:: with SMTP id p8mr14366527wrm.162.1621424964203; Wed, 19 May 2021 04:49:24 -0700 (PDT)
MIME-Version: 1.0
References: <32242.1620502978@localhost> <CAC7UV9bYq6=oGRmf0tywmjSXTBuTPdj9phpAvTk3G-DHdtYSBg@mail.gmail.com> <29437.1620657906@localhost>
In-Reply-To: <29437.1620657906@localhost>
From: Robin MARX <robin.marx@uhasselt.be>
Date: Wed, 19 May 2021 13:49:07 +0200
Message-ID: <CAC7UV9akAtba23d+4mPNPzte4frzmo5oKrkJczg=JDVZf4AYww@mail.gmail.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>
Cc: qlog@ietf.org, IETF QUIC WG <quic@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000058c6e05c2ad6b4c"
Archived-At: <https://mailarchive.ietf.org/arch/msg/qlog/i_CokPiJpZpSQvduc1Fbhv7iNaY>
Subject: Re: [Qlog] qlog in pcap-ng format
X-BeenThere: qlog@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <qlog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/qlog>, <mailto:qlog-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/qlog/>
List-Post: <mailto:qlog@ietf.org>
List-Help: <mailto:qlog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/qlog>, <mailto:qlog-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 May 2021 11:49:34 -0000

Hello Michael,

Sorry for the late reply, but gmail decided your mail belonged in my spam
folder for some unfathomable reason.

I must then admit my lack of knowledge on the PCAP-NG format and its
possibilities and support in e.g., open source libraries.
I've added a comment/TODO for this in the issue where we're tracking the
qlog serialization format at
https://github.com/quiclog/internet-drafts/issues/144#issuecomment-844023310
Any initial materials you might provide for this would be most welcome.

The question about what to do with the separate qlog mailing list now that
we're eyeing QUIC wg adoption will be escalated to the ADs. Thanks for
mentioning this.

With best regards,
Robin



On Mon, 10 May 2021 at 16:45, Michael Richardson <mcr+ietf@sandelman.ca>
wrote:

>
> Robin MARX <robin.marx@uhasselt.be> wrote:
>     > I agree there is significant overlap between PCAP and qlog
> conceptually
>     > (though I did not know pcap was actually considered for adoption at
> the
>     > IETF).
>
> Please note that pcap (legacy) is intended as Informational.
> PCAP-NG (I hate "NG" for a format that is now 10 years old!), is intended
> as
> Standards Track.
>
>     > However, from my understanding, the PCAP format is strongly oriented
>
> Your understanding is accurate for PCAP, but not for PCAP-NG.
> If I had a do-over, PCAP-NG would have been pure-CBOR.
>
>     > Finally, I've added the QUIC wg in CC, as that's where most of the
>     > work/discussion will likely be done in the future.
>
> Then, I suggest maybe the qlog ML should get killed, if you want discussion
> on the QUIC list.
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>            Sandelman Software Works Inc, Ottawa and Worldwide
>
>
>
>
>

-- 

dr. Robin Marx
Postdoc researcher - Web protocols
Expertise centre for Digital Media

*Cellphone *+32(0)497 72 86 94

www.uhasselt.be
Universiteit Hasselt - Campus Diepenbeek
Agoralaan Gebouw D - B-3590 Diepenbeek
Kantoor EDM-2.05