Re: [tcpdump-workers] [OPSAWG] [pcap-ng-format] draft-gharris-opsawg-pcap.txt --- IANA considerations

2021-01-06 Thread Adrian Farrel via tcpdump-workers
--- Begin Message --- Hi, I'm pitching in here as Independent Submissions Editor (ISE). I really should use the proper email for this (rfc-...@rfc-editor.org) but I'm sticking with this address as it is already subscribed to the OPSAWG list. Responding to this particular email because (I

Re: [tcpdump-workers] [OPSAWG] [pcap-ng-format] draft-gharris-opsawg-pcap.txt --- IANA considerations

2021-01-06 Thread mohamed.boucadair--- via tcpdump-workers
--- Begin Message --- Hi Michael, One comment inline. Cheers, Med > -Message d'origine- > De : OPSAWG [mailto:opsawg-boun...@ietf.org] De la part de Michael > Richardson > Envoyé : mardi 22 décembre 2020 17:36 > À : Guy Harris > Cc : Pcap-ng file format ; > ops...@ietf.org;

Re: [tcpdump-workers] [OPSAWG] [pcap-ng-format] draft-gharris-opsawg-pcap.txt --- IANA considerations

2020-12-22 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Dec 22, 2020, at 8:36 AM, Michael Richardson wrote: > Guy Harris wrote: > >> And, as per my idea of using 65535 to mean "custom linktype", similar >> to pcapng custom blocks and options, with either: > > I'm happy with this proposal, but isn't it pcapng specific? No

Re: [tcpdump-workers] [OPSAWG] [pcap-ng-format] draft-gharris-opsawg-pcap.txt --- IANA considerations

2020-12-22 Thread Michael Richardson via tcpdump-workers
--- Begin Message --- wrote: >> -Message d'origine- >> De : OPSAWG [mailto:opsawg-boun...@ietf.org] De la part de Michael >> Richardson >> Envoyé : mardi 22 décembre 2020 17:36 >> À : Guy Harris >> Cc : Pcap-ng file format ; >> ops...@ietf.org;

Re: [tcpdump-workers] [OPSAWG] [pcap-ng-format] draft-gharris-opsawg-pcap.txt --- IANA considerations

2020-12-22 Thread Michael Richardson via tcpdump-workers
--- Begin Message --- <#secure method=pgp mode=sign> Guy Harris wrote: >> The short of it is: >> >> 1) reserve bits 16:28 of linktype as zero. > In pcap files, presumably; you have only bits 0:15 in pcapng IDBs. Yes. That's why I changed the illustration of the packet so that