Re: [IPFIX] WG: I-D Action: draft-ietf-ipfix-flow-selection-tech-06.txt

Benoit Claise <bclaise@cisco.com> Fri, 27 May 2011 10:57 UTC

Return-Path: <bclaise@cisco.com>
X-Original-To: ipfix@ietfa.amsl.com
Delivered-To: ipfix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94F11E069A for <ipfix@ietfa.amsl.com>; Fri, 27 May 2011 03:57:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.789
X-Spam-Level:
X-Spam-Status: No, score=-1.789 tagged_above=-999 required=5 tests=[AWL=0.810, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DJMjr-4GiAOF for <ipfix@ietfa.amsl.com>; Fri, 27 May 2011 03:57:32 -0700 (PDT)
Received: from av-tac-bru.cisco.com (weird-brew.cisco.com [144.254.15.118]) by ietfa.amsl.com (Postfix) with ESMTP id 97E8EE0662 for <ipfix@ietf.org>; Fri, 27 May 2011 03:57:32 -0700 (PDT)
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-bru.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id p4RAcPde019877; Fri, 27 May 2011 12:38:25 +0200 (CEST)
Received: from [10.55.43.53] (ams-bclaise-8714.cisco.com [10.55.43.53]) by strange-brew.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id p4RAcOD1024945; Fri, 27 May 2011 12:38:25 +0200 (CEST)
Message-ID: <4DDF7F20.1000004@cisco.com>
Date: Fri, 27 May 2011 12:38:24 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10
MIME-Version: 1.0
To: "Zseby, Tanja" <tanja.zseby@fokus.fraunhofer.de>
References: <20110523092128.18082.9981.idtracker@ietfa.amsl.com> <804B13F8F3D94A4AB18B9B01ACB68FA1044F55B0@EXCHSRV.fokus.fraunhofer.de>
In-Reply-To: <804B13F8F3D94A4AB18B9B01ACB68FA1044F55B0@EXCHSRV.fokus.fraunhofer.de>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit
Cc: ipfix@ietf.org
Subject: Re: [IPFIX] WG: I-D Action: draft-ietf-ipfix-flow-selection-tech-06.txt
X-BeenThere: ipfix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IPFIX WG discussion list <ipfix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipfix>, <mailto:ipfix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipfix>
List-Post: <mailto:ipfix@ietf.org>
List-Help: <mailto:ipfix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipfix>, <mailto:ipfix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 May 2011 10:57:33 -0000

Dear Tanja,

One quick remark (a thorough review should follow) regarding this I.E.

7.5.  fsFlowEntryTotalCount

    Description:

       This Information Element specifies the current number of all Flow
       Entries that form the parent population as input to the Flow
       Selection Process.

    Abstract Data Type: unsigned64

    ElementId: TBD5

    Status: Proposed

    Units: Flow Entries


In Cisco, years ago, we have defined the I.E. #3 with the same concept. 
It is used when we do router-based aggregation, which is exported with 
NetFlow version 8. It represents the number of flow that we're given as 
input to the router-based aggregation process.
See 
http://www.cisco.com/en/US/technologies/tk648/tk362/technologies_white_paper09186a00800a3db9_ps6601_Products_White_Paper.html 
(which btw, we're busy updating)

So this TBD5 should be 3.  Does it make sense?

Regards, Benoit.
> Hi all,
>
> we worked on a major revision of the flow selection draft and just submitted a new version (see below). Among other changes we now provide a much improved classification of methods, which is more consistent with the PSAMP packet selection documents.
> Many thanks to all who provided comments.
>
> Changes:
>   - Flow recording process removed
>   - Clarification of difference between flow selection and packet selection
>   - Distinguished flow filtering and flow sampling similar to PSAMP
>   - Flow selection in the metering process either before aggregation or after aggregation
>   - Integrated Flow-state dependent packet selection
>   - Supporting arbitrary  key space subsets with property match flow filtering
>   - Removed timestamp IEs for reporting
>   - Mediator integrated in first picture
>   - Configuration parameters and IEs redefined and re-named
>   - Many rewording, shortened several paragraphs to improve readability
>
> Kind regards
> Tanja
>
>
> -----Ursprüngliche Nachricht-----
> Von: ipfix-bounces@ietf.org [mailto:ipfix-bounces@ietf.org] Im Auftrag von internet-drafts@ietf.org
> Gesendet: Montag, 23. Mai 2011 11:21
> An: i-d-announce@ietf.org
> Cc: ipfix@ietf.org
> Betreff: [IPFIX] I-D Action: draft-ietf-ipfix-flow-selection-tech-06.txt
>
> A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Flow Information Export Working Group of the IETF.
>
> 	Title           : Flow Selection Techniques
> 	Author(s)       : Salvatore D&#39;Antonio
>                            Tanja Zseby
>                            Christian Henke
>                            Lorenzo Peluso
> 	Filename        : draft-ietf-ipfix-flow-selection-tech-06.txt
> 	Pages           : 25
> 	Date            : 2011-05-23
>
>     Flow selection is the process of selecting a subset of flows from all
>     flows observed at an observation point.  Flow selection reduces the
>     effort of post-processing flow data and transferring flow records.
>     This document describes motivations for flow selection and presents
>     flow selection techniques.  It provides an information model for
>     configuring flow selection techniques and discusses what information
>     about a flow selection process should be exported.
>
>
>
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-ipfix-flow-selection-tech-06.txt
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> This Internet-Draft can be retrieved at:
> ftp://ftp.ietf.org/internet-drafts/draft-ietf-ipfix-flow-selection-tech-06.txt
> _______________________________________________
> IPFIX mailing list
> IPFIX@ietf.org
> https://www.ietf.org/mailman/listinfo/ipfix
> _______________________________________________
> IPFIX mailing list
> IPFIX@ietf.org
> https://www.ietf.org/mailman/listinfo/ipfix