Re: Proposed new pcap format

[Michael Richardson <mcr () sandelman ottawa on ca>]

-----BEGIN PGP SIGNED MESSAGE-----


> > > > > "Fulvio" == Fulvio Risso <fulvio.risso () polito it> writes:
    >> I agree, but since we a are trying to define a standard,

    Fulvio> I don't think the IETF is willing to define a standard for
    Fulvio> this.  I feel better to say "we would like to document the
    Fulvio> new file format used by libpcap".  There are already
    Fulvio> examples of this in the IETF (e.g. RFC 1761 "Snoop Version 2
    Fulvio> Packet Capture File Format").

  Yes, we can try for informational RFC.
  I'm not opposed to doing it this way - I just suggest that the bar is
much higher in 2004 than it was in 1995.

    Fulvio> In IETF usuully there is an option which is "mandatory"
    Fulvio> (often the simplest one), while the remaining are
    Fulvio> "optional".

  Only for standards track :-)

- --
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr () xelerance com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQH/tJYqHRg3pndX9AQHBOgQAnMTaUTD6nVJubnEQkMaSyr5tm8pzQZsI
XXVZcII30K+YT9/9b6bn0/tIm8sQRgAiMAMnvafJMx4LzjoLtrlzTWN64dtKGJpb
bXfJpv20zIxVHPYyKwJY+xRzmNl/ozKc+Hp9E8AliKsLXtE4L2J+ZDhQh/1O+q76
sX87kX87yQo=
=fg8V
-----END PGP SIGNATURE-----
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.