Re: [Dots] WGLC for draft-ietf-dots-telemetry-use-cases-04

Hi Yuhei, 

One quick comment about: 

==
            "attack-description": "DNS amplification Attack: This attack is a type of reflection attack in which attackers spoofes a target's IP address. The attackers abuses vulnerbilities in DNS servers to turn small queries into larger payloads."
==

and 

==
            "attack-description":"NTP amplification Attack: This attack is a type of reflection attack in which attackers spoofes a target's IP address. The attackers abuses vulnerbilities in NTP servers to turn small queries into larger payloads."
==

Please note that the telemetry spec says the following:

   When conveying attack details in DOTS telemetry messages (Sections
   8.2, 8.3, and 9), DOTS agents MUST NOT include the 'attack-
   description' attribute unless the corresponding attack mapping
   details were not previously shared with the peer DOTS agent.

So, the text should explain why "attack-description" attributes are present in the example. 

You may consider removing them but add some text to recall the attack mapping over the data channel. 

Thank you. 

Cheers,
Med

> -----Message d'origine-----
> De : Dots <dots-bounces@ietf.org> De la part de H Y
> Envoyé : vendredi 11 février 2022 05:16
> À : dots@ietf.org
> Cc : dots-chairs@ietf.org; Valery Smyslov <valery@smyslov.net>;
> BOUCADAIR Mohamed INNOV/NET <mohamed.boucadair@orange.com>; draft-ietf-
> dots-telemetry-use-cases@ietf.org
> Objet : Re: [Dots] WGLC for draft-ietf-dots-telemetry-use-cases-04
> 
> Hi all,
> 
> We modified some nits and upload as 05. We will add some description to
> clarify our use cases.
> 
> Comments are welcome.
> 
> Thanks,
> Yuhei
> 
> 2022年2月9日(水) 23:34 H Y <yuuhei.hayashi@gmail.com>:
> >
> > Hi Med,
> >
> > Thank you for your comments and suggestions.
> >
> > I will revise the draft in a few days.
> >
> > Thanks,
> > Yuhei
> >
> > 2022年2月9日(水) 22:59 <mohamed.boucadair@orange.com>:
> > >
> > > Hi Valery, all,
> > >
> > > I support advancing this document, but I think a revised version is
> needed.
> > >
> > > FWIW, some comments and suggestions can be found at:
> > > * pdf:
> > > https://raw.githubusercontent.com/boucadair/IETF-Drafts-Reviews/mast
> > > er/draft-ietf-dots-telemetry-use-cases-04-rev%20Med.pdf
> > > * doc:
> > > https://github.com/boucadair/IETF-Drafts-Reviews/raw/master/draft-ie
> > > tf-dots-telemetry-use-cases-04-rev%20Med.doc
> > >
> > > Cheers,
> > > Med
> > >
> > > > -----Message d'origine-----
> > > > De : Dots <dots-bounces@ietf.org> De la part de Valery Smyslov
> > > > Envoyé : mercredi 9 février 2022 12:28 À : dots@ietf.org Cc :
> > > > dots-chairs@ietf.org; draft-ietf-dots-telemetry-use-cases@ietf.org
> > > > Objet : [Dots] WGLC for draft-ietf-dots-telemetry-use-cases-04
> > > >
> > > > Hi,
> > > >
> > > > this message starts a two-week working group last call for
> > > > draft-ietf- dots-telemetry-use-cases-04.
> > > > The WGLC will end on Thursday, February 24. Please, review the
> > > > draft and send your comments to the mailing list.
> > > >
> > > > Regards,
> > > > Frank & Valery.
> > > >
> > > > _______________________________________________
> > > > Dots mailing list
> > > > Dots@ietf.org
> > > > https://www.ietf.org/mailman/listinfo/dots
> > >
> > > ____________________________________________________________________
> > > _____________________________________________________
> > >
> > > Ce message et ses pieces jointes peuvent contenir des informations
> > > confidentielles ou privilegiees et ne doivent donc pas etre
> > > diffuses, exploites ou copies sans autorisation. Si vous avez recu
> > > ce message par erreur, veuillez le signaler a l'expediteur et le
> detruire ainsi que les pieces jointes. Les messages electroniques etant
> susceptibles d'alteration, Orange decline toute responsabilite si ce
> message a ete altere, deforme ou falsifie. Merci.
> > >
> > > This message and its attachments may contain confidential or
> > > privileged information that may be protected by law; they should not
> be distributed, used or copied without authorisation.
> > > If you have received this email in error, please notify the sender
> and delete this message and its attachments.
> > > As emails may be altered, Orange is not liable for messages that
> have been modified, changed or falsified.
> > > Thank you.
> > >
> >
> >
> > --
> > ----------------------------------
> > Yuuhei HAYASHI
> > 08065300884
> > yuuhei.hayashi@gmail.com
> > iehuuy_0220@docomo.ne.jp
> > ----------------------------------
> 
> 
> 
> --
> ----------------------------------
> Yuuhei HAYASHI
> 08065300884
> yuuhei.hayashi@gmail.com
> iehuuy_0220@docomo.ne.jp
> ----------------------------------

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.