Re: [Dots] draft-fu-dots-ipfix-extension revised into draft-fu-dots-ipfix-tcp-tracking

Roland Dobbins <rdobbins@arbor.net> Fri, 17 March 2017 01:57 UTC

Return-Path: <rdobbins@arbor.net>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB1B6129BB7 for <dots@ietfa.amsl.com>; Thu, 16 Mar 2017 18:57:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level:
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=thescout.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SHDKNWQ8hxDM for <dots@ietfa.amsl.com>; Thu, 16 Mar 2017 18:57:04 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0121.outbound.protection.outlook.com [104.47.42.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B9C0129BB3 for <dots@ietf.org>; Thu, 16 Mar 2017 18:57:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thescout.onmicrosoft.com; s=selector1-arbor-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/ZuyBBnMOGJX78grfMMFtSZ0UnEVIf6nnIMFeUdal7Y=; b=FX35w5IpgIz1wJecjStDzmKO1bTkg4E9qvPD2t0ecF6CptGBYwFxAbWX23SPixdSZIVjOnv1o7ui4wA+qnflBzKe5OZgsYhgfT+C0o9Rcp3pn0hkvG1s8zKZ3gAY1Am5Sg0uMdeUlDKZhzNhOVcO/ORapO94ywcL0Z+QPq2yCeY=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arbor.net;
Received: from [172.19.254.107] (49.228.114.252) by BN3PR0101MB1028.prod.exchangelabs.com (10.160.182.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.961.17; Fri, 17 Mar 2017 01:56:03 +0000
From: Roland Dobbins <rdobbins@arbor.net>
To: "dots@ietf.org" <dots@ietf.org>
Date: Fri, 17 Mar 2017 08:55:45 +0700
Message-ID: <91C81774-B920-4071-8909-25E678CA8132@arbor.net>
In-Reply-To: <F8F4995E43962F4996B280E9678CED00015394A9@SZXEMI507-MBX.china.huawei.com>
References: <F8F4995E43962F4996B280E9678CED0001538042@SZXEMI507-MBX.china.huawei.com> <359EC4B99E040048A7131E0F4E113AFC0104F19267@marathon> <F8F4995E43962F4996B280E9678CED00015389FC@SZXEMI507-MBX.china.huawei.com> <359EC4B99E040048A7131E0F4E113AFC0104F1C5A1@marathon> <F8F4995E43962F4996B280E9678CED0001538F0E@SZXEMI507-MBX.china.huawei.com> <20170316110115.8499287.34698.143525@sandvine.com> <707552ED-22FA-4455-9D9F-95A8670620F1@arbor.net> <F8F4995E43962F4996B280E9678CED00015394A9@SZXEMI507-MBX.china.huawei.com>
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"
X-Mailer: MailMate (1.9.6r5347)
X-Originating-IP: [49.228.114.252]
X-ClientProxiedBy: SG2PR01CA0094.apcprd01.prod.exchangelabs.com (10.170.138.148) To BN3PR0101MB1028.prod.exchangelabs.com (10.160.182.16)
X-MS-Office365-Filtering-Correlation-Id: 64c2d729-ca11-4aed-b231-08d46cd8c528
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001); SRVR:BN3PR0101MB1028;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 3:bY3qV8yc4S3/9FrwDpoJgmgwbaHkNg4Ny4NqWB8W4kBhVqdMtH/0D8VceM1ViDzjUmzUqJJzuHegFgQp1bp2cS0z7+TpJwRWhdz9klfi3MaMP5okT35jeTkH49jrjRjdhir+NfLpd15xWCZD7rwHRWDPmygc9EZllJgJ2qAo+ya1Ifpq1tzI1db9neLf5p3JoFW2vdKHOvLIwDjwG7aBWvwaBeI1AcLJUNrxJyRWagHz0NKO9mS7kdyF4ZtDqdI/BedW4UOUCco2NMJzJNOP5g==; 25:jNc6SGUIai/z/KHaVDvSk0kCSsly1C7ZIY12O2qMYilgVMZC0/yhgJmd21soVWG1H2QMwXNxSc5VhTor3PeBBxUZTQB4pwevSEgwVvf98TvBMuXh1WeRgsGi743qFRY0wOCCfB72vU8nNR4bSuSl4O1MTZEJwLS+ir56AZXPErSbj5sfsqCEZhykJNT32egBur6FuJzPhTuSJ59CzRDK0N1cms2314PDyQD8s8hQvMpzaKJ+BJt7i+ehVU2rIcne82Re8RWPIb5VGD+G2U+XEviGweo/RXJDwRJ6O8yts4AN1+VR/WXD4nGlYCRTjmkCWGYQo2QXkj0b2mL3oL3eg4gOBZq7cdwENqdqq5IiJ8ldClCHE6pyNj93b/w82y3pIDgUK6B9LjabhoexcpLNDPBAx+TS+mTH9IrfMkyuQELHu6Te30i+a7KuDdiPcZHYXJ/8vt1g5ZP1YqmDDYrEQg==
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 31:2Rt53nQneKDMbVOuMaUyHXmO7iBJWka0CVXLDwVdh9TmvnObe1QltFFn2Ef6WvrqZ/MSv2ZA76BsubCcpDQ/RQjdSEaIYnqR+TzNHQih3OpkL3riNQ0ZpwQ6K3VGfE8TH+z+Z6ZWA+xiBLXbydyCIH3XKJF0T+gn90zhlcdk3/yOlT7DrjQyk30prFbmr9zScMhPGwW3py49BNWhSpginP6ICblHPDkfHrUZjnIoVlN4Fh5+yu5pJZzOErAJONgblyTwNTVERgVPe1Hmwq172g==; 20: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
X-Microsoft-Antispam-PRVS: <BN3PR0101MB10288CD8ABF5F7389287F051CA390@BN3PR0101MB1028.prod.exchangelabs.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6041248)(20161123564025)(20161123555025)(20161123562025)(20161123558025)(20161123560025)(6072148); SRVR:BN3PR0101MB1028; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0101MB1028;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 4: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
X-Forefront-PRVS: 0249EFCB0B
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39450400003)(24454002)(50986999)(6246003)(76176999)(83716003)(93886004)(38730400002)(2906002)(305945005)(53936002)(25786008)(110136004)(7736002)(5660300001)(86362001)(53546008)(33656002)(1730700003)(50226002)(8676002)(2501003)(81166006)(2351001)(36756003)(6116002)(229853002)(3846002)(5640700003)(90366009)(42186005)(6486002)(77096006)(47776003)(50466002)(66066001)(230783001)(6916009)(6666003)(189998001)(82746002)(2950100002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0101MB1028; H:[172.19.254.107]; FPR:; SPF:None; MLV:sfv; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 23: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
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 6:JM0Ol5KSFBC7iCSG4rgPoztfaZ7n7Df3N/fgA9WjHGQLrUz57MYpy3lG9E7aARMrfXsDm8C8BTDGHMpjnaBHiVRzrAP6BGecMSpENwzMuxTJXni+dVvaXnoAowVXrUAbvteupImKq0OwDBsQksNGaOKfpYtwi5VKYMqwn3G3VvDS6z+Yt0lgYxjPcUOxDguUJbHYn/ZTZT6b+CZPT9QR5eoLKHePkSk/lTX7LyVfRPv98EdRmJvwFwzWW6UaGdyiUSGbGNRTUHSqvuAo3iIUIp93mpNjZi7X3nrzIB31f1QqiRvyXMhEza+FeUJNPVGmLtLUMlkw8EytGt2pixj23exULSHPBIFLVOG8dcr2YHUdH1zlY2jXrCPa3ZINvnNW1Ao7SLzTorttXnoE7nq6IA==; 5:GrAlZlAwyRF3/4BqsPn2fjLmO1F1eRoBA8Lckm8ku3jpeVK7hlD+u2yimSZnXaVaZQYIanh66/aUxcNoA02S/wxif0ljwUomF6LWkWCcXt3puLJEOK7WOSkYSMM0ZxKslvLGCjRd/GzFFXdKpfYaTg==; 24:dg69s3ON+nLhJoirw6rlavMZTN4LcyreO1szjwAIyJAkxrwzq9kAIUB31W2EEaFVcSFTzHx08ntZ5nxG8RUpeiQW++25GmnDTJr7VjqUIac=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 7:eD5B32g+pp1LCYwmtpYOX4qT0GOsslxXBFFbgPKAxmpCWulMyJg66oAIZly0dww8To7BokscMwdyyGHld1yc0Avcqgz9K+0GJe+fl9H/ShvgMDVdxM/B1OoFmSnkk91+qiN+n74ECXJt3lsuSk5sl4E8LS50+Xd+8/DJO9n2ihEDBCa2D1OYJCaiAOriPkIsNG6nZ2Jv5gLFun5S5M5vPPo7CmnPZbOS2MQLiN+FjG+tZlhIfan6ble85xDO1yE++gl65XETxiUZGuic01ZYJ0ywU0fOqn1DLa3r4715KxjRAAymkjvXe/JLnncOXk2t9yCT+8NEpB/21vxjOZqUAw==
X-OriginatorOrg: arbor.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Mar 2017 01:56:03.4471 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0101MB1028
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/8YeZzGDKGF914YD5d8NV8NKr6xw>
Subject: Re: [Dots] draft-fu-dots-ipfix-extension revised into draft-fu-dots-ipfix-tcp-tracking
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Mar 2017 01:57:07 -0000

On 17 Mar 2017, at 8:51, Zhenghui (Marvin) wrote:

>  We've actually implemented a prototype and hooked it to a domestic 
> ISP's network in China.  I haven't received the performance report 
> from them yet. So, no detailed information to share with you at the 
> moment.

What speed link(s)?

As Dave Dolson indicated, this makes more sense for non-router/-switch 
middleboxes than for routers/layer-3 switches.  The performance and 
scale concerns still apply for links of any real speed.

> Again, I understand your concern about the scope thing. We will handle 
> it with discretion.

Greatly appreciated!


-----------------------------------
Roland Dobbins <rdobbins@arbor.net>