[IPFIX] Comments on draft-kashima-ipfix-data-link-layer-monitoring-01.txt

Nevil Brownlee <n.brownlee@auckland.ac.nz> Mon, 08 March 2010 02:13 UTC

Return-Path: <n.brownlee@auckland.ac.nz>
X-Original-To: ipfix@core3.amsl.com
Delivered-To: ipfix@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9A5D03A67E1 for <ipfix@core3.amsl.com>; Sun, 7 Mar 2010 18:13:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.299
X-Spam-Level:
X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_13=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DRMJHUQdnJNH for <ipfix@core3.amsl.com>; Sun, 7 Mar 2010 18:13:04 -0800 (PST)
Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz [130.216.12.34]) by core3.amsl.com (Postfix) with ESMTP id 100D43A6803 for <ipfix@ietf.org>; Sun, 7 Mar 2010 18:13:01 -0800 (PST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 2B4F6415C41; Mon, 8 Mar 2010 15:12:53 +1300 (NZDT)
X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz
Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost (larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dxKGhYYzIpVS; Mon, 8 Mar 2010 15:12:53 +1300 (NZDT)
Received: from nevil-laptop.sfac.auckland.ac.nz (nevil-laptop.sfac.auckland.ac.nz [130.216.38.130]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailhost.auckland.ac.nz (Postfix) with ESMTP id 2035A415C52; Mon, 8 Mar 2010 15:12:49 +1300 (NZDT)
Message-ID: <4B945D21.3040804@auckland.ac.nz>
Date: Mon, 08 Mar 2010 15:12:49 +1300
From: Nevil Brownlee <n.brownlee@auckland.ac.nz>
User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213)
MIME-Version: 1.0
To: IPFIX Working Group <ipfix@ietf.org>
References: <AE36820147909644AD2A7CA014B1FB520A042922@xmb-sjc-222.amer.cisco.com> <20100218135814.C821.1AB7FA03@nttv6.net>
In-Reply-To: <20100218135814.C821.1AB7FA03@nttv6.net>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [IPFIX] Comments on draft-kashima-ipfix-data-link-layer-monitoring-01.txt
X-BeenThere: ipfix@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IPFIX WG discussion list <ipfix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipfix>, <mailto:ipfix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipfix>
List-Post: <mailto:ipfix@ietf.org>
List-Help: <mailto:ipfix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipfix>, <mailto:ipfix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Mar 2010 02:13:05 -0000

Hi all:

This draft introuces three new IPFIX Information Elements (IEs)
that would enable IPFIX to be used for monitoring (parts of) in
data-link-layer parts of packet headers.  It concentrates on Ethernet,
especially as used in providing layer-2 VPN services (IEEE 802.1ad
and 802.1ah).

Now that I've read it and thought about it, I have three comments:

1. The IPFIX/PSAMP architecture standardises the collection of
    *IP-related* data, this proposal would extend it to cover data from
    other parts of a packet's headers.  That would be a significant
    extension.  Is there support for such a generalisation?

2. It's presented as a simple, minimal extension to IPFIX/PSAMP,
    simply adding three new IEs PSAMP IEs, i.e with numbers above 338.
    Does it provide enough detail?  Should there be more than just three?
    For example, how about having separate IEs for S-VID, C-VID, B-VID
    and I=SID?  What other IEs are needed for PPP and WiMAX?

3. The description of proposed IE dataLinkFrameType seems rather
    minimal - eventually we'll want to add more data link types.  For
    example, the ifType-MIB (www.iana.org/assignments/ianaiftype-mib)
    has a much longer list.  Maybe we have to choose here between a long
    list of types, each with its own set of fields, or a short list of
    very general fields?  A short, simple list seems very appealing!

Cheers, Nevil

-- 
---------------------------------------------------------------------
  Nevil Brownlee                    Computer Science Department | ITS
  Phone: +64 9 373 7599 x88941             The University of Auckland
  FAX: +64 9 373 7453   Private Bag 92019, Auckland 1142, New Zealand