Re: [Dots] WGLC for draft-ietf-dots-telemetry-use-cases-04

[H Y <[e-mail]>]

Hi Med,

I got it. I misunderstood the way to use "attack-description".

>You may consider removing them but add some text to recall the attack mapping over the data channel.
I will remove the "attack-description".

Thanks,
Yuhei

2022年2月11日(金) 15:49 <[e-mail]>:
>
> Hi Yuhei,
>
> One quick comment about:
>
> ==
>             "attack-description": "DNS amplification Attack: This attack is a type of reflection attack in which attackers spoofes a target's IP address. The attackers abuses vulnerbilities in DNS servers to turn small queries into larger payloads."
> ==
>
> and
>
> ==
>             "attack-description":"NTP amplification Attack: This attack is a type of reflection attack in which attackers spoofes a target's IP address. The attackers abuses vulnerbilities in NTP servers to turn small queries into larger payloads."
> ==
>
> Please note that the telemetry spec says the following:
>
>    When conveying attack details in DOTS telemetry messages (Sections
>    8.2, 8.3, and 9), DOTS agents MUST NOT include the 'attack-
>    description' attribute unless the corresponding attack mapping
>    details were not previously shared with the peer DOTS agent.
>
> So, the text should explain why "attack-description" attributes are present in the example.
>
> You may consider removing them but add some text to recall the attack mapping over the data channel.
>
> Thank you.
>
> Cheers,
> Med
>
> > -----Message d'origine-----
> > De : Dots <[e-mail]> De la part de H Y
> > Envoyé : vendredi 11 février 2022 05:16
> > À : [e-mail]
> > Cc : [e-mail]; Valery Smyslov <[e-mail]>;
> > BOUCADAIR Mohamed INNOV/NET <[e-mail]>; draft-ietf-
> > [e-mail]
> > Objet : Re: [Dots] WGLC for draft-ietf-dots-telemetry-use-cases-04
> >
> > Hi all,
> >
> > We modified some nits and upload as 05. We will add some description to
> > clarify our use cases.
> >
> > Comments are welcome.
> >
> > Thanks,
> > Yuhei
> >
> > 2022年2月9日(水) 23:34 H Y <[e-mail]>:
> > >
> > > Hi Med,
> > >
> > > Thank you for your comments and suggestions.
> > >
> > > I will revise the draft in a few days.
> > >
> > > Thanks,
> > > Yuhei
> > >
> > > 2022年2月9日(水) 22:59 <[e-mail]>:
> > > >
> > > > Hi Valery, all,
> > > >
> > > > I support advancing this document, but I think a revised version is
> > needed.
> > > >
> > > > FWIW, some comments and suggestions can be found at:
> > > > * pdf:
> > > > https://raw.githubusercontent.com/boucadair/IETF-Drafts-Reviews/mast
> > > > er/draft-ietf-dots-telemetry-use-cases-04-rev%20Med.pdf
> > > > * doc:
> > > > https://github.com/boucadair/IETF-Drafts-Reviews/raw/master/draft-ie
> > > > tf-dots-telemetry-use-cases-04-rev%20Med.doc
> > > >
> > > > Cheers,
> > > > Med
> > > >
> > > > > -----Message d'origine-----
> > > > > De : Dots <[e-mail]> De la part de Valery Smyslov
> > > > > Envoyé : mercredi 9 février 2022 12:28 À : [e-mail] Cc :
> > > > > [e-mail]; [e-mail]
> > > > > Objet : [Dots] WGLC for draft-ietf-dots-telemetry-use-cases-04
> > > > >
> > > > > Hi,
> > > > >
> > > > > this message starts a two-week working group last call for
> > > > > draft-ietf- dots-telemetry-use-cases-04.
> > > > > The WGLC will end on Thursday, February 24. Please, review the
> > > > > draft and send your comments to the mailing list.
> > > > >
> > > > > Regards,
> > > > > Frank & Valery.
> > > > >
> > > > > _______________________________________________
> > > > > Dots mailing list
> > > > > [e-mail]
> > > > > https://www.ietf.org/mailman/listinfo/dots
> > > >
> > > > ____________________________________________________________________
> > > > _____________________________________________________
> > > >
> > > > Ce message et ses pieces jointes peuvent contenir des informations
> > > > confidentielles ou privilegiees et ne doivent donc pas etre
> > > > diffuses, exploites ou copies sans autorisation. Si vous avez recu
> > > > ce message par erreur, veuillez le signaler a l'expediteur et le
> > detruire ainsi que les pieces jointes. Les messages electroniques etant
> > susceptibles d'alteration, Orange decline toute responsabilite si ce
> > message a ete altere, deforme ou falsifie. Merci.
> > > >
> > > > This message and its attachments may contain confidential or
> > > > privileged information that may be protected by law; they should not
> > be distributed, used or copied without authorisation.
> > > > If you have received this email in error, please notify the sender
> > and delete this message and its attachments.
> > > > As emails may be altered, Orange is not liable for messages that
> > have been modified, changed or falsified.
> > > > Thank you.
> > > >
> > >
> > >
> > > --
> > > ----------------------------------
> > > Yuuhei HAYASHI
> > > 08065300884
> > > [e-mail]
> > > [e-mail]
> > > ----------------------------------
> >
> >
> >
> > --
> > ----------------------------------
> > Yuuhei HAYASHI
> > 08065300884
> > [e-mail]
> > [e-mail]
> > ----------------------------------
>
> _________________________________________________________________________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
> Thank you.
>


-- 
----------------------------------
Yuuhei HAYASHI
08065300884
[e-mail]
[e-mail]
----------------------------------