Re: [BEHAVE] New Version Notification for draft-ietf-behave-ipfix-nat-logging-04.txt

"Senthil Sivakumar (ssenthil)" <ssenthil@cisco.com> Tue, 11 November 2014 02:47 UTC

Return-Path: <ssenthil@cisco.com>
X-Original-To: behave@ietfa.amsl.com
Delivered-To: behave@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 959701AD4A1 for <behave@ietfa.amsl.com>; Mon, 10 Nov 2014 18:47:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.094
X-Spam-Level:
X-Spam-Status: No, score=-15.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.594, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kjhKpJlw25Yr for <behave@ietfa.amsl.com>; Mon, 10 Nov 2014 18:47:36 -0800 (PST)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 001B41AD49E for <behave@ietf.org>; Mon, 10 Nov 2014 18:47:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10035; q=dns/txt; s=iport; t=1415674055; x=1416883655; h=from:to:cc:subject:date:message-id:mime-version; bh=t/5er4g5raU6z5cEJ45yT4iy/t9MUklWSLNWxWiuSVY=; b=iNyNU1101bVD0W1h7vlQTtxYeCYEWDaCpxvBjRw0FY2JybFo2RQK0QzJ g9cqn+rfNLm97vZxhfK5rQ/tSKh/hyNXyCtTcJ/esxr4sX1bUsXXokdbN HxXK7XoHDVmQ6oVE3wBUWdbFg9GSe+RJKOjB+TXI+XEuxak9nwmk0SPqm o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ak8FADR4YVStJA2D/2dsb2JhbABSCoJIRlRUBQTKEoFwh02BHhYBAQEBAX2EAgECBHcCEgEIEQMBAigoERQJCgQOBQmIIwMSCAXGHA2GUwEBAQEBAQQBAQEBAQEBARcDBgGOVYFVCEsNBBCEQgWSMYRThQ+CEoE0PYMSimyGcYN6bAGBBUKBAwEBAQ
X-IronPort-AV: E=Sophos; i="5.07,357,1413244800"; d="scan'208,217"; a="95357689"
Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-5.cisco.com with ESMTP; 11 Nov 2014 02:47:34 +0000
Received: from xhc-rcd-x07.cisco.com (xhc-rcd-x07.cisco.com [173.37.183.81]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id sAB2lYAq011381 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 11 Nov 2014 02:47:35 GMT
Received: from xmb-rcd-x15.cisco.com ([169.254.5.48]) by xhc-rcd-x07.cisco.com ([173.37.183.81]) with mapi id 14.03.0195.001; Mon, 10 Nov 2014 20:47:34 -0600
From: "Senthil Sivakumar (ssenthil)" <ssenthil@cisco.com>
To: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
Thread-Topic: New Version Notification for draft-ietf-behave-ipfix-nat-logging-04.txt
Thread-Index: AQHP/VnYFHmkWST0Y0OIJ5fzEjQ1TQ==
Date: Tue, 11 Nov 2014 02:47:34 +0000
Message-ID: <D086E2B9.11C463%ssenthil@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.4.5.141003
x-originating-ip: [10.82.226.192]
Content-Type: multipart/alternative; boundary="_000_D086E2B911C463ssenthilciscocom_"
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/behave/meMRJjCJQnTbcjY6duzy0_KQGhk
Cc: "behave@ietf.org" <behave@ietf.org>, Tom Taylor <tom.taylor.stds@gmail.com>
Subject: Re: [BEHAVE] New Version Notification for draft-ietf-behave-ipfix-nat-logging-04.txt
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/behave/>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Nov 2014 02:47:39 -0000

No, I am not in Honolulu. Like Tom said I can be available for a phone call.

Thanks
Senthil

From: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com<mailto:spencerdawkins.ietf@gmail.com>>
Date: Monday, November 10, 2014 8:38 PM
To: Senthil Sivakumar <ssenthil@cisco.com<mailto:ssenthil@cisco.com>>
Cc: "behave@ietf.org<mailto:behave@ietf.org>" <behave@ietf.org<mailto:behave@ietf.org>>, Tom Taylor <tom.taylor.stds@gmail.com<mailto:tom.taylor.stds@gmail.com>>
Subject: Re: FW: New Version Notification for draft-ietf-behave-ipfix-nat-logging-04.txt

Hi, Senthil,

I'd love to talk to you about this draft (and to people about the MIB draft, and to people about the syslog draft) this week. Are you in Honolulu?

Spencer

On Monday, November 3, 2014, Senthil Sivakumar (ssenthil) <ssenthil@cisco.com<mailto:ssenthil@cisco.com>> wrote:
Hi Spencer,
I wanted to touch base with you to see if there are any updates on the
progress of the logging
drafts. Let us know if you are waiting on the authors on something.

Thanks
Senthil

On 7/2/14 12:09 PM, "Senthil Sivakumar (ssenthil)" <ssenthil@cisco.com<javascript:;>>
wrote:

>A new version of the draft is published incorporating all the comments
>received. Please
>Let me know if you see anything that we discussed and agreed upon is
>missing.
>
>Thanks
>Senthil
>
>On 7/2/14 6:10 AM, "internet-drafts@ietf.org<javascript:;>" <internet-drafts@ietf.org<javascript:;>>
>wrote:
>
>>
>>A new version of I-D, draft-ietf-behave-ipfix-nat-logging-04.txt
>>has been successfully submitted by Senthil Sivakumar and posted to the
>>IETF repository.
>>
>>Name:         draft-ietf-behave-ipfix-nat-logging
>>Revision:     04
>>Title:                IPFIX Information Elements for logging NAT Events
>>Document date:        2014-07-02
>>Group:                Individual Submission
>>Pages:                24
>>URL:
>>http://www.ietf.org/internet-drafts/draft-ietf-behave-ipfix-nat-logging-0
>>4
>>.txt
>>Status:
>>https://datatracker.ietf.org/doc/draft-ietf-behave-ipfix-nat-logging/
>>Htmlized:
>>http://tools.ietf.org/html/draft-ietf-behave-ipfix-nat-logging-04
>>Diff:
>>http://www.ietf.org/rfcdiff?url2=draft-ietf-behave-ipfix-nat-logging-04
>>
>>Abstract:
>>   Network operators expect NAT devices to log events like creation and
>>   deletion of translations and information about the resources it is
>>   managing.  The logs are essential in many cases to identify an
>>   attacker or a host that was used to launch malicious attacks and/or
>>   for various other purposes of accounting.  Since there is no standard
>>   way of logging this information, different NAT devices log the
>>   information using proprietary formats and hence it is difficult to
>>   expect a consistent behavior.  The lack of a consistent way to log
>>   the data makes it difficult to write the collector applications that
>>   would receive this data and process it to present useful information.
>>   This document describes the formats for logging of NAT events.
>>
>>
>>
>>
>>
>>Please note that it may take a couple of minutes from the time of
>>submission
>>until the htmlized version and diff are available at tools.ietf.org<http://tools.ietf.org>.
>>
>>The IETF Secretariat
>>
>