Specify MAC address format like this example 00-00-5E-00-53-23

Reasons for choosing this format: * IEEE 802 uses this format: https://en.wikipedia.org/wiki/MAC_address#Notational_conventions * IETF uses this format: https://tools.ietf.org/html/rfc7042 It is not yet clear if we should prefer upper or lowercase. I just went with uppercase for now because that is what the references above use. Reason for choosing 00-00-5E-00-53-23: It is in the range of unicast MAC addresses reserved for documentation as specified by: https://tools.ietf.org/html/rfc7042#section-2.1.2
elastic · May 16, 2019 · 9f3f531 · 9f3f531
1 parent 580752c
commit 9f3f531
Show file tree

Hide file tree

Showing 6 changed files with 6 additions and 0 deletions.
diff --git a/schemas/client.yml b/schemas/client.yml
@@ -49,6 +49,7 @@
     - name: mac
       level: core
       type: keyword
+      example: 00-00-5E-00-53-23
       description: >
         MAC address of the client.
 

diff --git a/schemas/destination.yml b/schemas/destination.yml
@@ -40,6 +40,7 @@
     - name: mac
       level: core
       type: keyword
+      example: 00-00-5E-00-53-23
       description: >
         MAC address of the destination.
 

diff --git a/schemas/host.yml b/schemas/host.yml
@@ -52,6 +52,7 @@
     - name: mac
       level: core
       type: keyword
+      example: 00-00-5E-00-53-23
       description: >
         Host mac address.
 

diff --git a/schemas/observer.yml b/schemas/observer.yml
@@ -19,6 +19,7 @@
     - name: mac
       level: core
       type: keyword
+      example: 00-00-5E-00-53-23
       description: >
         MAC address of the observer
     - name: ip

diff --git a/schemas/server.yml b/schemas/server.yml
@@ -49,6 +49,7 @@
     - name: mac
       level: core
       type: keyword
+      example: 00-00-5E-00-53-23
       description: >
         MAC address of the server.
 

diff --git a/schemas/source.yml b/schemas/source.yml
@@ -40,6 +40,7 @@
     - name: mac
       level: core
       type: keyword
+      example: 00-00-5E-00-53-23
       description: >
         MAC address of the source.