Re: [IPFIX] I-D Action: draft-ietf-ipfix-ie-doctors-07.txt

Nevil Brownlee <n.brownlee@auckland.ac.nz> Tue, 11 December 2012 02:54 UTC

Return-Path: <n.brownlee@auckland.ac.nz>
X-Original-To: ipfix@ietfa.amsl.com
Delivered-To: ipfix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3F8F21F86D5 for <ipfix@ietfa.amsl.com>; Mon, 10 Dec 2012 18:54:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.599
X-Spam-Level:
X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id reOvmeK7X8-s for <ipfix@ietfa.amsl.com>; Mon, 10 Dec 2012 18:54:11 -0800 (PST)
Received: from mx2.auckland.ac.nz (mx2.auckland.ac.nz [130.216.12.44]) by ietfa.amsl.com (Postfix) with ESMTP id 0EC4221F86D2 for <ipfix@ietf.org>; Mon, 10 Dec 2012 18:54:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=auckland.ac.nz; i=n.brownlee@auckland.ac.nz; q=dns/txt; s=uoa; t=1355194451; x=1386730451; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=Hse3xXFVjE+hFXELj3QUgi9Fs5mbWqKFRFY7BfNOjLk=; b=hTJtkVq06C2/FwBQZGlDRDGAqLR8jUsW4pIoN7/rYNqGFw1cIWMeaHLv EtqPHkFoFlb/2joyPkwyRWXW53xcaID0Sqbw2D1OMRhFtzEwJW+Q8VTft rlJq4uXhrXPyEnm0+Tz/xJALnews223qQdtfXd1iLA+Wsa3xmMJEcrup6 w=;
X-IronPort-AV: E=Sophos;i="4.84,256,1355050800"; d="scan'208";a="161466828"
X-Ironport-HAT: UNIVERSITY - $RELAY-THROTTLE
X-Ironport-Source: 130.216.38.131 - Outgoing - Outgoing-SSL
Received: from nevil-laptop1.sfac.auckland.ac.nz (HELO [130.216.38.131]) ([130.216.38.131]) by mx2-int.auckland.ac.nz with ESMTP; 11 Dec 2012 15:54:08 +1300
Message-ID: <50C6A04F.6000106@auckland.ac.nz>
Date: Tue, 11 Dec 2012 15:54:07 +1300
From: Nevil Brownlee <n.brownlee@auckland.ac.nz>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: Brian Trammell <trammell@tik.ee.ethz.ch>
References: <CCE2E13A.12616%andrewf@plixer.com> <662DB88B-EAB3-4980-BED3-59AB29552DA3@tik.ee.ethz.ch>
In-Reply-To: <662DB88B-EAB3-4980-BED3-59AB29552DA3@tik.ee.ethz.ch>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: IETF IPFIX Working Group <ipfix@ietf.org>
Subject: Re: [IPFIX] I-D Action: draft-ietf-ipfix-ie-doctors-07.txt
X-BeenThere: ipfix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IPFIX WG discussion list <ipfix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipfix>, <mailto:ipfix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipfix>
List-Post: <mailto:ipfix@ietf.org>
List-Help: <mailto:ipfix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipfix>, <mailto:ipfix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Dec 2012 02:54:13 -0000

Hi Brian:

Since we agree that your proposed change is purely editorial,
making the change at AUTH48 is the right way to do it.
Benoit, I think these things need AD approval, is that right?

Cheers, Nevil


On 4/12/12 10:44 PM, Brian Trammell wrote:
> Hi, Andrew,
>
> I recall this thread, but had completely missed the resolution to it; apologies, and thanks for bringing it back up.
>
> Rereading the descriptions and the approved revision of ie-doctors, there are two problems with the draft text:
>
> (1) the assumed semantics are incorrect; and
>
> (2) initiatorOctets doesn't actually duplicate octetTotalCount (since it counts from the end of the L4 payload as opposed to the beginning of the L3 header).
>
> The following problems still exist with these IEs:
>
> (3) initiatorPackets still appears to duplicate packetTotalCount, unless...
>
> (3a) the definition of initiatorPackets is interpreted in a certain way. As it is, it's still ambiguous to the point of not being implementable: "The total number of layer 4 packets in a flow from the initiator"... What is a "layer 4 packet"? Is this a packet containing payload beyond the layer 4 header? containing content that will be delivered to the application (which may be different, depending on which layer 4)? a packet containing a layer 4 header known to the MP?
>
> (4) responder{Octets/Packets} still duplicate the RFC 5103 reversed versions of initiatorOctets and initiatorPackets using "initiator" biflowDirection, which goes against the general rule to reuse IEs when necessary.
>
>  From a process standpoint, I'm not sure what the right thing to do is, as IE-DOCTORS is now in the RFC-EDITOR queue. I believe the point made by this paragraph (the second in section 4.9) to be a necessary one, but the examples given are clearly in error. The meaning of the text is conveyed by the first sentence, which does not require update; the example is non-normative. I believe that the problem is therefore editorial, and would propose an RFC-EDITOR note like the following during AUTH48:
>
> OLD:
>
>     Before registering a new Information Element, it must be determined
>     that it would be sufficiently unique within the IANA IE registry.
>     This evaluation has not always been done in the past, and the
>     existence of the Information Elements defined without this evaluation
>     should not be taken as an example that such Information Element
>     definition practices should be followed in the future.  Specific
>     examples of such Information Elements include initiatorOctets and
>     responderOctets (which duplicate octetDeltaCount and its reverse per
>     [RFC5103]) and initiatorPackets and responderPackets (the same, for
>     packetDeltaCount).
>
> NEW:
>
>     Before registering a new Information Element, it must be determined
>     that it would be sufficiently unique within the IANA IE registry.
>     This evaluation has not always been done in the past, and the
>     existence of the Information Elements defined without this evaluation
>     should not be taken as an example that such Information Element
>     definition practices should be followed in the future.  Specific
>     examples of such Information Elements include initiatorPackets and
>     responderPackets (which appear to duplicate packetTotalCount and
>     its reverse per [RFC5103]).
>
> However, I'd like a ruling from our Friendly Area Directors as to whether this an acceptable resolution at this stage.
>
> Separate from this, issue (3a) above concerning the ambiguity of initiatorPackets and responderPackets should be handled with a revision to the Information Element definitions.
>
> Cheers,
>
> Brian
>
> On 4 Dec 2012, at 5:18, Andrew Feren <andrewf@plixer.com> wrote:
>
>> Hi Brian,
>>
>> I haven't reread this entire draft, but happened to notice that this
>> version still has
>>
>> "Specific
>>    examples of such Information Elements include initiatorOctets and
>>    responderOctets (which duplicate octetDeltaCount and its reverse per
>>    [RFC5103 <http://tools.ietf.org/html/rfc5103>]) and initiatorPackets
>> and responderPackets (the same, for
>>    packetDeltaCount)."
>>
>>
>> Which is not correct
>>
>> Earlier discussion at
>>
>> http://www.ietf.org/mail-archive/web/ipfix/current/msg06451.html
>>
>> http://www.ietf.org/mail-archive/web/ipfix/current/msg06456.html
>>
>>
>> -Andrew
>>
>> On 10/3/12 10:47 AM, "internet-drafts@ietf.org" <internet-drafts@ietf.org>
>> wrote:
>>
>>>
>>> A New Internet-Draft is available from the on-line Internet-Drafts
>>> directories.
>>> This draft is a work item of the IP Flow Information Export Working
>>> Group of the IETF.
>>>
>>> 	Title           : Guidelines for Authors and Reviewers of IPFIX
>>> Information Elements
>>> 	Author(s)       : Brian Trammell
>>>                          Benoit Claise
>>> 	Filename        : draft-ietf-ipfix-ie-doctors-07.txt
>>> 	Pages           : 33
>>> 	Date            : 2012-10-03
>>>
>>> Abstract:
>>>   This document provides guidelines for how to write definitions of new
>>>   Information Elements for the IP Flow Information Export (IPFIX)
>>>   protocol.  It provides instructions on using the proper conventions
>>>   for Information Elements to be registered in the IANA IPFIX
>>>   Information Element registry, and provides guidelines for expert
>>>   reviewers to evaluate new registrations.
>>>
>>>
>>> The IETF datatracker status page for this draft is:
>>> https://datatracker.ietf.org/doc/draft-ietf-ipfix-ie-doctors
>>>
>>> There's also a htmlized version available at:
>>> http://tools.ietf.org/html/draft-ietf-ipfix-ie-doctors-07
>>>
>>> A diff from the previous version is available at:
>>> http://www.ietf.org/rfcdiff?url2=draft-ietf-ipfix-ie-doctors-07
>>>
>>>
>>> Internet-Drafts are also available by anonymous FTP at:
>>> ftp://ftp.ietf.org/internet-drafts/
>>>
>>> _______________________________________________
>>> IPFIX mailing list
>>> IPFIX@ietf.org
>>> https://www.ietf.org/mailman/listinfo/ipfix
>>
>
> _______________________________________________
> IPFIX mailing list
> IPFIX@ietf.org
> https://www.ietf.org/mailman/listinfo/ipfix
>


-- 
---------------------------------------------------------------------
  Nevil Brownlee                    Computer Science Department | ITS
  Phone: +64 9 373 7599 x88941             The University of Auckland
  FAX: +64 9 373 7453   Private Bag 92019, Auckland 1142, New Zealand