Re: [Dots] draft-fu-dots-ipfix-extension revised into draft-fu-dots-ipfix-tcp-tracking

Roland Dobbins <rdobbins@arbor.net> Tue, 14 March 2017 13:41 UTC

Return-Path: <rdobbins@arbor.net>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F3321288AD for <dots@ietfa.amsl.com>; Tue, 14 Mar 2017 06:41:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=thescout.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xu9DUzI1w87G for <dots@ietfa.amsl.com>; Tue, 14 Mar 2017 06:41:11 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0122.outbound.protection.outlook.com [104.47.38.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C567128834 for <dots@ietf.org>; Tue, 14 Mar 2017 06:41:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thescout.onmicrosoft.com; s=selector1-arbor-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qU28HpQPLfXdypjvSAQ6VcJCJrai+JaqHmHQzao7gT4=; b=EkTOTox7IPuLfYVUY+SbU5ZMpwhVjWiyBkkJfkfQf/KbfC+hStk42tmEqN71rCff68d7J9+gpy6HNz0WBreMeAVPsmz+OtOnCSHKvAl5usqIu7b92OU7C5wJV/fm0G8zcjOmh88Ew26CnVqFtKJrzNiJ+m3CHRb4N+I91hKazeU=
Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arbor.net;
Received: from [172.19.254.107] (49.228.125.65) by DM2PR0101MB1039.prod.exchangelabs.com (10.160.129.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.961.17; Tue, 14 Mar 2017 13:41:09 +0000
From: Roland Dobbins <rdobbins@arbor.net>
To: "dots@ietf.org" <dots@ietf.org>
Date: Tue, 14 Mar 2017 20:40:50 +0700
Message-ID: <DD376EA7-28E1-466F-9186-5BEAF3B76E5E@arbor.net>
In-Reply-To: <F8F4995E43962F4996B280E9678CED00015389FC@SZXEMI507-MBX.china.huawei.com>
References: <F8F4995E43962F4996B280E9678CED0001538042@SZXEMI507-MBX.china.huawei.com> <359EC4B99E040048A7131E0F4E113AFC0104F19267@marathon> <F8F4995E43962F4996B280E9678CED00015389FC@SZXEMI507-MBX.china.huawei.com>
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"
X-Mailer: MailMate (1.9.6r5347)
X-Originating-IP: [49.228.125.65]
X-ClientProxiedBy: PS1PR0401CA0026.apcprd04.prod.outlook.com (10.169.107.164) To DM2PR0101MB1039.prod.exchangelabs.com (10.160.129.156)
X-MS-Office365-Filtering-Correlation-Id: fd1480cd-f4ad-4283-c979-08d46adfc66f
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001); SRVR:DM2PR0101MB1039;
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0101MB1039; 3:jnG4BEx10fLthtyP/LUBnvueI85qh6zqYfmDlahDCBqVv5MdkIYJFfGJjvbUC9z+muf7o1pzEf9vok25Mia5rD2HQHJ7aIrzi9YQRSrYvZyLFw2yc4lCxHXpb8z1b3MnOYva7LbRkW3Tla1ODljEoqwkshCRXvLUbB+t0ccRWBNAut8o5blM3xFC+pgw8lMD6Jz7VIj9G0b54KvUdfayGKM0ASWzSNehi+JI2WWou3HPym9noejhcXnK3h82gVJoahBp4vYW4LLHN4t4TDs+UA==; 25:hzuonBtd86ePH2ZJLIkWUGiNGxgiig7obR7DL5gdgd7G/v6tP7jKlJh7l7I/ARRXDp5mrc0jEMt0NRESl6eWD3eXdiHJijrLtxMT70RxaXYNQG5jKYfjSbXhf6B4Xy316mfS8oYaEiXsvb49NyaedzN/s/Lh/E+UNU+HQXCp9ldDF7AkApWDKNPlxmJj0fXLDlVnHcLtsD0x0nb7SQFzG1PsAqDon94E31YPU7iZ6bIQa5zCNWq/72Hp9Pn1R8+RsGYDrY039m7kWMVnsBKudRKJx4uMkvMHctIwU6AAsuOIJ7NvY27vw5Bk21T7nSLs8jUHI73I5rLl+34/0qElJHXj1mlHod0Lru0YMJwXs40keYcI1kwrQncuu8KFVD77Lr2YUSkCPpM/+gZMQGMkYf/z0zZKacXTrnycm0fMvEPE3o+mEXF3gFmlwhXLlApGeGvmNOyxeFuLBciZoMAA1Q==
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0101MB1039; 31:uFSLgxT9rwPBRQnI5iEPYJFnAaYdcHc/fDDtS/7USDOTPHdjGRAuzYbR0L0rwOnd9hiToq3YioqOBwwvvCLIY+Sg3WS60cxK4kNOj96Aquq0jGUkVnaFr9AkqUSsXl56a+8zQw5Wm/q1s+/QNSoM5MMwDQpmDvY+SYWI7bLjoN3NM54m8t9oqYvxgBlL5Vp0YBIZzSp8dEu/QG/fY974bNXyOq6dF1Ga7PwWKAlFqGJazxHDCgzpBtOogT9cJ7VfYxmhQZGqs3ai0Rf2zsZAZAx105sF+ofquCYrbCoPstg=; 20:Upn4v3R7XSrPyiiBifPQTlMfO0cLmWmL9pcUuqBP85w4liwbDPT8LkL4SVCGJR6j7AFITCmvrFpAxV0DHgkldO7vgr+8vKZuQVNrRsv5nfCNv9m5reRVy5/7TASUPBFZlgWsySEz3bGM8tn2bCW9ZXe6kcJC+TPN+17DY3iMVPd+dYm2C2cSJgmVM6FAQk7tT1l8s/F+gn4clV5hH1GmVdrX/YZ0kNYtXLVHeW86ZtpMLaCWgyIEJD7FYr1eDxGulySgjOJyYAv2m43XvfczzqZN5R0p5LOKWqT1wAc35bntxBU44lbmDthX39kS5f1rSDOXFZpTQmAHrYWetqw3zyhn7P2PMHDLC4noj6WG66MyDL7gz57Cgrc6wyfhirE2f7D88DNV5fPrIprMn2DScGp/VMMcOGDopE7Oxo3FtgOSIWCJmT9eyWt7ouN9CBMZZozTEJHZJ5Rt7h9xn7lmrdrRngNctlHHoU1t4Nw+GBG/S/oVm9kgKjO9LbNlxCfX
X-Microsoft-Antispam-PRVS: <DM2PR0101MB103947AE65338155FBBE2AF0CA240@DM2PR0101MB1039.prod.exchangelabs.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6041248)(20161123555025)(20161123562025)(20161123564025)(20161123558025)(20161123560025)(6072148); SRVR:DM2PR0101MB1039; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0101MB1039;
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0101MB1039; 4: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
X-Forefront-PRVS: 02462830BE
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6009001)(6049001)(39450400003)(24454002)(50986999)(5640700003)(77096006)(90366009)(25786008)(76176999)(305945005)(53546007)(2906002)(2501003)(230783001)(6486002)(50226002)(66066001)(81166006)(189998001)(6916009)(2950100002)(3846002)(47776003)(6116002)(1730700003)(5660300001)(7736002)(6666003)(36756003)(38730400002)(86362001)(2351001)(6246003)(33656002)(8676002)(53936002)(110136004)(42186005)(229853002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0101MB1039; H:[172.19.254.107]; FPR:; SPF:None; MLV:sfv; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0101MB1039; 23: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
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0101MB1039; 6:4lx4d38jgeRDEiQcssEjr4FsJtYh5F69mrAQ5+SvJ2hqcB2bm/G8fUHJBwtFSM6iSmzMpqMzS3VMy6i7ilMC7H6m49jKEE//drZxq9mur+PSzZFXFA4Z6TpIeQXCPavH9WrcAyzEs2Gk2eztCv/2W88WExNTBbGROF8tExctT9BtdWEdFGmTCquYewa/9QZfGStpzEbeS9dhLSaOMshBmorqMDRWnu0HIhTfcRE/bKUOGT2d8A5PU4TdyRtP5X7YPylLm+nTl9Z7QG9UDTm+zV0+ebCM+vwG+BDumv6E7JeOmeo9NGDK8MkVoNHo8ih0VznMPW19ZTTioy4oFtmH22yCwv5fLLbQYwh5u8xbsGdFoqadNQVeBWW3+RYz7a+w3cJI3l6W1b6iASRZVdx7RA==; 5:4FxJjNgAqvaIFOCHVoiIkjrVB4O/cD/Kxm0RK9kqBp+XthpZHvvXXZ+KWGsfk01bPKka23HnxxAYHJyzhAPfPHl5N/s8/O5KAvl3oJsPJkJ3V4dRy+RSv2/ojwZBEBkPdNMszd2cRsKVSv2JWyOukw==; 24:J/XpDfJvaBceYADi1BbUecmgA6xZRkrMY219FaUy4XExbnSfS593cZ6tk2uXDKgSOx6mxi/TX4/LVNrgic4R6TIkxF43FndevH9Dpmho7Pc=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0101MB1039; 7:LnwS07ccdM1pB09VRI1yP65CCop9j4zWifr5CYm95Dco+2rkBrCeh4RLcUAsZbhy+WFQ0Au1zSPY3/Sc2IbFm84w43+e+4OrOG1HeY658fRC69rGQ5YW2XWl6lLA1bqPiserPq+aE3gYC3GZPGL6F8x4ss7JTtQa56UA1G0y/I7EWaIbKhjgQ3GdYiUmnr3n3u6/V6y7cwoojOzyOleXOerrKUBL+OoAEU8Qzri9QtY7ETz1/nPX7iVJ1s8wdCsd3MIyFXWBk4Ns3YGnGK+kpIIT5kzH4Gb9eTSOPNKGVgrewoTWG6Q0kMcq1d4Hq9f5O6aNREYXR0f+d/8kNpkUSw==
X-OriginatorOrg: arbor.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Mar 2017 13:41:09.6425 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0101MB1039
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/dGpxSYQu9feemzxiLYaUjJWtKDU>
Subject: Re: [Dots] draft-fu-dots-ipfix-extension revised into draft-fu-dots-ipfix-tcp-tracking
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Mar 2017 13:41:13 -0000

On 14 Mar 2017, at 11:34, Zhenghui (Marvin) wrote:

> Basically, we'd like to hear from the WG, about their opinions on this 
> draft, so we can figure out what to do next.

1.  The draft itself is predicted upon invalid assumptions about the 
capabilities inherent in IPFIX as it stands today.

2.  The draft itself is predicated upon invalid assumptions about the 
capabilities inherent in IPFIX collectors/analyzers today.

3.  The draft itself is predicated upon invalid assumptions about the 
capabilities inherent in IPFIX exporters today and anticipated in the 
foreseeable future.

4.  The draft itself is predicated upon invalid assumptions about the 
division of labor between IPFIX exporters and IPFIX 
collectors/analyzers.

5.  The best forum for this discussion is within the Operations and 
Management Area of the IETF.

6.  The way to initiate a discussion about re-opening the IPFIX WG is to 
engage the IETF Area Director for Operations and Management.

-----------------------------------
Roland Dobbins <rdobbins@arbor.net>