Re: [Insipid] draft-dawes-dispatch-logme-reqs-02 (repost to insipid)

Paul Kyzivat <pkyzivat@alum.mit.edu> Fri, 18 October 2013 17:00 UTC

Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: insipid@ietfa.amsl.com
Delivered-To: insipid@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39C1311E826F for <insipid@ietfa.amsl.com>; Fri, 18 Oct 2013 10:00:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.156
X-Spam-Level:
X-Spam-Status: No, score=-0.156 tagged_above=-999 required=5 tests=[AWL=0.054, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611, RDNS_NONE=0.1, SARE_SUB_OBFU_Q1=0.227]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xQJnniLmEI0p for <insipid@ietfa.amsl.com>; Fri, 18 Oct 2013 10:00:21 -0700 (PDT)
Received: from qmta12.westchester.pa.mail.comcast.net (qmta12.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:44:76:96:59:227]) by ietfa.amsl.com (Postfix) with ESMTP id D68AF11E8302 for <insipid@ietf.org>; Fri, 18 Oct 2013 09:59:16 -0700 (PDT)
Received: from omta23.westchester.pa.mail.comcast.net ([76.96.62.74]) by qmta12.westchester.pa.mail.comcast.net with comcast id ecAL1m0051c6gX85Cgz03G; Fri, 18 Oct 2013 16:59:00 +0000
Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.164]) by omta23.westchester.pa.mail.comcast.net with comcast id egyz1m00M3ZTu2S3jgz0uF; Fri, 18 Oct 2013 16:59:00 +0000
Message-ID: <526168D3.7050200@alum.mit.edu>
Date: Fri, 18 Oct 2013 12:58:59 -0400
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: "Dawes, Peter, Vodafone Group" <Peter.Dawes@vodafone.com>
References: <51EDEF82.3060908@alum.mit.edu> <4A4F136CBD0E0D44AE1EDE36C4CD9D996EE917CA@VOEXM31W.internal.vodafone.com>
In-Reply-To: <4A4F136CBD0E0D44AE1EDE36C4CD9D996EE917CA@VOEXM31W.internal.vodafone.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1382115540; bh=cHqzRPO2n7CKohGQdmLmPt5/0/VlGefSgqIDThf8oYo=; h=Received:Received:Message-ID:Date:From:MIME-Version:To:Subject: Content-Type; b=MS3NNg9ultwgRTO9lrDKbAyAxPQhcDL5WEQZt8wHNXh6vyrxkY0buuERGtGA/o9wV WqwbYMjM3ldx5h31Z0iM3bts1FJmmIl8n6dMV7LN5JR0Mp7dbz+xdchpcXS4wLLZeJ probHTgJhKJ0JSnFVj/VIb7IinOv6/wVqlbVYoF/udM+0y8+Ye/Q/m3N1ohS/KUdYI 7hTM5GZrW+/KHEiY7MOfyZAN/1Gi+rvP6YoIwSP4Gn46jtUPecpMbZ+JwghU3z/hgR AIHsHTUL9ay6FRLX1bCoARFj4rqHzvfBlmVqrGjMe4+Rbm7V7I+/z2vhRPb2ptCSpW Qjj69R5SSWNKA==
Cc: "insipid@ietf.org" <insipid@ietf.org>
Subject: Re: [Insipid] draft-dawes-dispatch-logme-reqs-02 (repost to insipid)
X-BeenThere: insipid@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Session-ID discussion list <insipid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/insipid>, <mailto:insipid-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/insipid>
List-Post: <mailto:insipid@ietf.org>
List-Help: <mailto:insipid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/insipid>, <mailto:insipid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Oct 2013 17:00:26 -0000

Hi Peter,

A few followups.

On 7/31/13 8:31 AM, Dawes, Peter, Vodafone Group wrote:
> Hello Paul,
> Thanks for the questions, I can add some discussion of these points by expanding on the potential solutions clause 7 in the next version of the draft. Extra text will be along the lines of the answers below.
>
> 1) For "when some servers are expected to be dialog stateful. Also if logging is to stop after some period of time."
> The stateful entities can be the sending and receiving UA, and a SIP proxy if the UAs do not insert and echo the log-me marker (REQ5, REQ6). I can describe this behaviour in the potential solutions.

OK. The issue is new state that must be retained to support this draft.

And its more of an issue for proxies, because proxies usually hold less 
state. (Many are not dialog stateful.)

> How logging stops is hinted at in clause 4 but I can give examples in the potential solutions. I do not propose that the draft specifies how logging is configured to be started and stopped though, the main focus of the draft is to add a marker for sessions of interest to logging.

I don't recall why I mentioned this.

> 2) For " Is free text good enough for identifying test cases? Isn't there possibility of collision? Since there is likely to be resistance to meaningful names that might tunnel information, perhaps these should be random numbers."
> These are good questions, it might well be that the Session-ID: value becomes the test case identifier.
>
> 3) For protocol to transmit the logs, RFC 6872 "The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model" has been suggested so I will look into this.

That defines a file format, not a protocol. You could potentially 
specify a protocol that can carry a file in CLF format.

> 4) For " trust by the server doing the logging of the log server, and authorization by the log server of those sending logs " I think mechanisms exist for mutual authentication of sender and receiver so I can add something.

This is entangled with choosing the protocol for transmission.

> I will also try to ensure that the descriptions of proposed solutions cover all aspects of the draft (log server, test case id) and thanks for spotting the syntax error in Fig. 3.

	Thanks,
	Paul

> Regards,
> Peter
>
> -----Original Message-----
> From: insipid-bounces@ietf.org [mailto:insipid-bounces@ietf.org] On Behalf Of Paul Kyzivat
> Sent: 23 July 2013 04:51
> To: insipid@ietf.org
> Subject: [Insipid] draft-dawes-dispatch-logme-reqs-02 (repost to insipid)
>
> Some questions about this draft:
>
> The requirements and other discussion imply certain behavior by servers that support this. I'd like to hear more explicit discussion of what that expected behavior is, within the potential solutions.
>
> E.g., when some servers are expected to be dialog stateful. Also if logging is to stop after some period of time.
>
> Section 7.1:
>
> This says the header is first inserted by the UAC. There might be reason to have it inserted by the UAS in some cases, or even a proxy or B2BUA based on policy for debugging a UA that can't be controlled.
>
> Is free text good enough for identifying test cases? Isn't there possibility of collision? Since there is likely to be resistance to meaningful names that might tunnel information, perhaps these should be random numbers.
>
> I want to hear more about sending the address of the server collecting logs. For this to be useful there must be an explicit or implicit protocol used to transmit the logs. Is there one such protocol or many?
> If many, how do you know which will be supported? What about trust by the server doing the logging of the log server, and authorization by the log server of those sending logs? Will all servers doing logging want to use a server chosen by the one inserting the logme request?
>
> Section 7.2:
>
> Where does the test case id go with this solution?
>
> In Figure 3 the call-info in the figure is syntactically incorrect. The parameter is a domain name, but it is required to be a URL.
>
> 	Thanks,
> 	Paul
> _______________________________________________
> insipid mailing list
> insipid@ietf.org
> https://www.ietf.org/mailman/listinfo/insipid
>