Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Damir Franusic
Hi Michael You know, I also share your disdain for ASN.1 format but in the mobile networks for example, it is used to define most protocols (TCAP, GSM MAP, etc.) and I don't see that changing any time soon. I think you may have misunderstood me. I only mentioned SCTP in context of explaining

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Damir Franusic
Hi I have read the specs for pcapng but then again I would have have to use The Simple Packet Block (SPB) or An Enhanced Packet Block (EPB) and that would not solve my problem because of this: Packet Data: the data coming from the network, including link-layer headers. ..The format of t

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Damir Franusic
Hi again I think maybe this will explain things a bit better. Li systems correlate everything using LI_ID and for them this serves a purpose of being their equivalent of a Link Layer Type. From what I sent earlier, the tshark CC example output, you can see that one of ELEE protocol's fields is

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Damir Franusic
Hi Guy I've tried to be as prompt and as accurate as possible so here is the draft, I hope you'll appreciate the effort. I agree that the initial thing I sent was an abomination. I will work on this draft as the project progresses, but for now, it covers everything implemented so far. http://

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Guy Harris
On May 12, 2019, at 1:28 PM, Damir Franusic wrote: > I've tried to be as prompt and as accurate as possible so here is the draft, > I hope you'll appreciate the effort. I agree > that the initial thing I sent was an abomination. I will work on this draft > as the project progresses, but for now

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Damir Franusic
That would be great thanks. That's all I ever wanted really, but now I understand the relevance of having a proper I-D. And yes, you are correct regarding the Header/PDU; quite simple. On May 12, 2019 10:38:21 PM GMT+02:00, Guy Harris wrote: >On May 12, 2019, at 1:28 PM, Damir Franusic >wrote

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Guy Harris
On May 12, 2019, at 1:48 PM, Damir Franusic wrote: > That would be great thanks. That's all I ever wanted really, but now I > understand the relevance of having a proper I-D. It will also be useful for documenting the protocol when run over SCTP. Are you planning on running the protocol throug

Re: [tcpdump-workers] New official link-layer type request

2019-05-12 Thread Damir Franusic
Hi I used I-D since It's still work in progress. And yes, I also looked at pcapng and assumed I couldn't go wrong with following those guideline s. I've never written an RFC or I-D so using pcapng draft seemed like a good starting point. I plan to document the SCTP part also and when it's all d