Re: [Insipid] WG Last Call: draft-ietf-insipid-logme-reqs

"Arun Arunachalam (carunach)" <carunach@cisco.com> Thu, 22 September 2016 14:34 UTC

Return-Path: <carunach@cisco.com>
X-Original-To: insipid@ietfa.amsl.com
Delivered-To: insipid@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5F4F12B243 for <insipid@ietfa.amsl.com>; Thu, 22 Sep 2016 07:34:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.836
X-Spam-Level:
X-Spam-Status: No, score=-16.836 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.316, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b2O3MizMWgrs for <insipid@ietfa.amsl.com>; Thu, 22 Sep 2016 07:34:30 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3372812BD1F for <insipid@ietf.org>; Thu, 22 Sep 2016 07:13:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11908; q=dns/txt; s=iport; t=1474553620; x=1475763220; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=oijuCGoCIt9hSSrAA6mg7ycQJQB6DCYOjzw3Nurt52U=; b=DKUVs7rC5TtnZTNG3Y2LnfccGXrvmRsS5jqCD7geqPjsJclmywSNx/EC K+S6hwWdTYWTClla7XqTzmmbIYqyzTUU8gRup5pH4ZZ1gFOdR7yRF/kQn DomuH436aCbvQ9jZ4h4hMSIXbSXyWM9QatAW8uJxeGvvm2R78qQ1sCkTZ 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BDBQDb5eNX/5pdJa1SDBoBAQEBAgEBA?= =?us-ascii?q?QEIAQEBAYMHNAEBAQEBHoFEDwezYYUPggSGHgIcgUs6EgECAQEBAQEBAV4nhGI?= =?us-ascii?q?BAQQdBlYQAgEIPwMCAgIwFBECBAoEBRmIMq5OjE4BAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEciDMIglCEEQEcgxorgi8FlB6FVwGPZYFuhGSJGocGhWKDewElAyyDGRy?= =?us-ascii?q?BUHKGXH8BAQE?=
X-IronPort-AV: E=Sophos;i="5.30,378,1470700800"; d="scan'208,217";a="324946599"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Sep 2016 14:13:39 +0000
Received: from XCH-ALN-019.cisco.com (xch-aln-019.cisco.com [173.36.7.29]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id u8MEDdr4024082 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 22 Sep 2016 14:13:39 GMT
Received: from xch-aln-015.cisco.com (173.36.7.25) by XCH-ALN-019.cisco.com (173.36.7.29) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 22 Sep 2016 09:13:38 -0500
Received: from xch-aln-015.cisco.com ([173.36.7.25]) by XCH-ALN-015.cisco.com ([173.36.7.25]) with mapi id 15.00.1210.000; Thu, 22 Sep 2016 09:13:38 -0500
From: "Arun Arunachalam (carunach)" <carunach@cisco.com>
To: "Paul Giralt (pgiralt)" <pgiralt@cisco.com>
Thread-Topic: [Insipid] WG Last Call: draft-ietf-insipid-logme-reqs
Thread-Index: AQHSDqeZWDIJ0TRtXU6Q4aH4MVNnb6B553oAgAAPIACAC/btgA==
Date: Thu, 22 Sep 2016 14:13:37 +0000
Message-ID: <38281C26-6FDD-4755-AFBB-F6AC93D2EC48@cisco.com>
References: <4C52DDE4-07CF-4F5F-8DB7-8CEB51119A6A@cisco.com> <7FA11A21-D8BC-4829-B6D5-EE2B44200D8E@cisco.com> <984E4584-C850-4198-8F78-1839A027C36A@cisco.com> <79D6B8EF-4C53-40B1-A7B9-C8C8479E153B@cisco.com>
In-Reply-To: <79D6B8EF-4C53-40B1-A7B9-C8C8479E153B@cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.150.54.120]
Content-Type: multipart/alternative; boundary="_000_38281C266FDD4755AFBBF6AC93D2EC48ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/insipid/b25hSCQUC3OrOFhDja_693UW48I>
Cc: "Arun Arunachalam \(carunach\)" <carunach@cisco.com>, "ben@nostrum.com" <ben@nostrum.com>, "Dawes, Peter, Vodafone Group" <Peter.Dawes@vodafone.com>, "insipid@ietf.org" <insipid@ietf.org>, "Gonzalo Salgueiro \(gsalguei\)" <gsalguei@cisco.com>
Subject: Re: [Insipid] WG Last Call: draft-ietf-insipid-logme-reqs
X-BeenThere: insipid@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: SIP Session-ID discussion list <insipid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/insipid>, <mailto:insipid-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/insipid/>
List-Post: <mailto:insipid@ietf.org>
List-Help: <mailto:insipid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/insipid>, <mailto:insipid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 22 Sep 2016 14:34:50 -0000

Hi Paul,

Please see inline.

On Sep 14, 2016, at 7:30 PM, Paul Giralt (pgiralt) <pgiralt@cisco.com<mailto:pgiralt@cisco.com>> wrote:

Thanks Arun. See below…

On Sep 14, 2016, at 6:36 PM, Arun Arunachalam (carunach) <carunach@cisco.com<mailto:carunach@cisco.com>> wrote:

REQ8: Should update to latest session-id draft. Also, I have some concerns about using Session-ID as the test case identifier. The Session-ID can change (in fact will change for every session because the initial INVITE will have a null remote UUID).

How about using the local UUID of the Session-ID generated by the originating UA / proxy as a test identifier (if the admin wants the system to auto-generate a test ID)?


I think using just the local UUID makes more sense because this will be consistent throughout the life of the session as long as the originating endpoint is still in the call. It’s possible that some B2BUA could remove the originator from the session (e.g. call gets transferred) but at that point, the device that requested the session be logged is no longer in an active session anyway.

That said, what if the admin doesn’t want the system to auto-generate a test ID? Where would that go? The local UUID must be in a very specific format to comply with drafy-ietf-insipid-session-id, so you can’t put any arbitrary text in for the local UUID. I think either you need to stipulate that the test ID will always be automatically generated or find some other place to put it.

I think there is value in giving the admin the ability to specify their own identifier.

One option would be to have a user defined test identifier as shown below:

   test-identifier = (alphanum / "_") *(alphanum "_")

If the user defined test identifier is not present, the log analysis server would use the local UUID of the originator’s Session-ID as the test identifier.


Also, should intermediaries be required to or at least allowed to continue indicating log me markings on other messages related to the session even if the originating device is no longer participating in the session?

This will be useful to perform an end-to-end call flow analysis.

The good thing about originator based log me marking is the “ability / control” to disable logging simply by disconnecting the call at the originator (the device requesting to enable logging).

This control no longer exists if we allow the intermediaries to continue marking even after the originator is no longer in the session.

Thanks!
Arun


-Paul