Re: [tcpdump-workers] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt

2020-09-28 Thread Guy Harris via tcpdump-workers
--- Begin Message ---
On Sep 28, 2020, at 12:06 PM, Michael Tuexen  wrote:

> Do we want to finally publish that? Up to now, I think the point was to
> find a home where it is substantially discussed and improved...

For example, unlike pcap, which is not easily changeable (you *can* change it, 
but that involves adding new magic numbers), pcapng can have new block types 
and option types.

There are extensible protocols with RFCs; that's handled with protocol 
registries:

https://www.iana.org/protocols

and with new I-Ds -> RFCs for extensions.  We'd have to set up registries for 
block and option types if we publish an RFC for pcapng.  We would *also* want a 
registry for link-layer header types, for both pcap and pcapng.

See, for example, RFC 1761

https://tools.ietf.org/html/rfc1761

which specifies the Sun snoop file format, and RFC 3827:

https://tools.ietf.org/html/rfc3827

which sets up a registry for snoop link-layer header types:


https://www.iana.org/assignments/snoop-datalink-types/snoop-datalink-types.xhtml#snoop-datalink-types-2

and adds some new entries to it.--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Re: [tcpdump-workers] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt

2020-09-28 Thread Guy Harris via tcpdump-workers
--- Begin Message ---
On Sep 28, 2020, at 12:06 PM, Michael Tuexen  wrote:

> On 28. Sep 2020, at 20:26, Michael Richardson  wrote:
> 
>> internet-dra...@ietf.org wrote:
>>> Diff:
>>> https://www.ietf.org/rfcdiff?url2=draft-tuexen-opsawg-pcapng-02
>> 
>> Hi, I have converted the xml to markdown.
> 
> Why? If we want to publish this, it will be published in xmlv3. So
> better to use that format earlier...

There are tools to convert Markdown to v2 or v3 RFC XML:

https://www.rfc-editor.org/pubprocess/tools/

so:

1) is it easier to edit Markdown or RFC XML?

2) is Markdown rich enough to do everything we want to do?

For 2), I note that


https://github.com/pcapng/pcapng/blob/master/draft-tuexen-opsawg-pcapng.md

has a bunch of stuff that GitHub isn't treating as markup, such as the stuff 
prior to the "Introduction" heading, and the tags such as "{::boilerplate 
bcp14}".  Is that an extension of Markdown not supported by GitHub's Markdown 
renderer but supported by some Markdown-to-RFC XML converter, or incomplete 
parts of the RFC XML to Markdown conversion?

In addition, the XML version at


https://github.com/pcapng/pcapng/blob/master/reference-draft-tuexen-opsawg-pcapng.xml

has some additional Decryption Secrets Block secret formats.  Those have data 
formats that *themselves* call for figures, and I'd been trying, at one point, 
to determine how to do that in RFC XML v2 format - it might require v3 format.  
Can that be handled with Markdown?--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Re: [tcpdump-workers] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt

2020-09-28 Thread Guy Harris via tcpdump-workers
--- Begin Message ---
On Sep 28, 2020, at 1:42 PM, Michael Tuexen  wrote:

> Shouldn't we write up (I can work on an initial version) of
> a specification for .pcap.


https://github.com/pcapng/pcapng/blob/master/draft-gharris-opsawg-pcap.xml


http://xml2rfc.tools.ietf.org/cgi-bin/xml2rfc.cgi?url=https://raw.githubusercontent.com/pcapng/pcapng/master/draft-gharris-opsawg-pcap.xml&modeAsFormat=html/ascii&type=ascii
--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Re: [tcpdump-workers] New Version Notification for draft-tuexen-opsawg-pcapng-02.txt

2020-09-28 Thread Guy Harris via tcpdump-workers
--- Begin Message ---
On Sep 28, 2020, at 2:00 PM, Michael Tuexen  wrote:

> On 28. Sep 2020, at 22:48, Guy Harris  wrote:
> 
>> On Sep 28, 2020, at 1:42 PM, Michael Tuexen  wrote:
>> 
>>> Shouldn't we write up (I can work on an initial version) of
>>> a specification for .pcap.
>> 
>>  
>> https://github.com/pcapng/pcapng/blob/master/draft-gharris-opsawg-pcap.xml
> 
> Cool. Do you want to publish it as an RFC?

At some point.

Currently, I view it as "up for review by the community", and there have been 
pull requests from the community applied.

Should its publication coincide with the introduction of an IANA registry of 
link-layer data types (replacing the tcpdump.org one)?

Should we publish one RFC for the pcap format and one RFC that includes the 
current content of the registry?  (The latter would probably be much bigger 
than the former)--- End Message ---
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers