Re: [IPFIX] No active/inactive timeout definitions in any IPFIX RFCs? Idle versus inactive terminology? (part of draft-ietf-bmwg-ipflow-meth-09 review)

"Jan Novak (janovak)" <janovak@cisco.com> Tue, 10 April 2012 11:17 UTC

Return-Path: <janovak@cisco.com>
X-Original-To: ipfix@ietfa.amsl.com
Delivered-To: ipfix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1D0621F85F6 for <ipfix@ietfa.amsl.com>; Tue, 10 Apr 2012 04:17:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nHW0jcVduDBe for <ipfix@ietfa.amsl.com>; Tue, 10 Apr 2012 04:17:49 -0700 (PDT)
Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id BC1A921F85F2 for <ipfix@ietf.org>; Tue, 10 Apr 2012 04:17:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=janovak@cisco.com; l=2690; q=dns/txt; s=iport; t=1334056668; x=1335266268; h=mime-version:content-transfer-encoding:subject:date: message-id:in-reply-to:references:from:to:cc; bh=jKtWqVQxA/FhjesZr7qixhUdkioC0mxIjs6oJBdEyH4=; b=RJkiPp3znRoSkv8bt0WEhaGj/nGYu8EaS0zfqFCoQOP9Ws+4eLxedtvp Av1mA4fVepl8VK3PPUQzwcpj0McOZ5MxOLlfpKWJ/UsUiFSgz9nxmSu5Z UqeZm7OdL0k4Eirxb7hTGtCp92NKXOIO330yKZJTm7TkQQSvow55mPEe8 4=;
X-IronPort-AV: E=Sophos;i="4.75,398,1330905600"; d="scan'208";a="70466540"
Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-2.cisco.com with ESMTP; 10 Apr 2012 11:17:47 +0000
Received: from xbh-ams-201.cisco.com (xbh-ams-201.cisco.com [144.254.75.7]) by ams-core-1.cisco.com (8.14.3/8.14.3) with ESMTP id q3ABHlxE030492; Tue, 10 Apr 2012 11:17:47 GMT
Received: from xmb-ams-212.cisco.com ([144.254.75.23]) by xbh-ams-201.cisco.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 10 Apr 2012 13:17:47 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 10 Apr 2012 13:17:45 +0200
Message-ID: <C95CC96B171AF24CA1BB6CA3C52D0BA001D4D371@XMB-AMS-212.cisco.com>
In-Reply-To: <4F841487.8090604@cisco.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: No active/inactive timeout definitions in any IPFIX RFCs? Idle versus inactive terminology? (part of draft-ietf-bmwg-ipflow-meth-09 review)
Thread-Index: Ac0XCi4AJ/m2p5GYTh+nYoKKfQEYjQAAOt3A
References: <4F841487.8090604@cisco.com>
From: "Jan Novak (janovak)" <janovak@cisco.com>
To: "Benoit Claise (bclaise)" <bclaise@cisco.com>, ipfix@ietf.org
X-OriginalArrivalTime: 10 Apr 2012 11:17:47.0894 (UTC) FILETIME=[8F3EA960:01CD170B]
Cc: Ron Bonica <rbonica@juniper.net>, Al Morton <acmorton@att.com>
Subject: Re: [IPFIX] No active/inactive timeout definitions in any IPFIX RFCs? Idle versus inactive terminology? (part of draft-ietf-bmwg-ipflow-meth-09 review)
X-BeenThere: ipfix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IPFIX WG discussion list <ipfix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipfix>, <mailto:ipfix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipfix>
List-Post: <mailto:ipfix@ietf.org>
List-Help: <mailto:ipfix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipfix>, <mailto:ipfix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Apr 2012 11:17:49 -0000

Hi,
I have checked the IPFIX documents at the time and couldn't
find any definitions while there was a need for them for
the BMWG document - so that's why it is there.
The definitions are quite cumbersome to develop (as you
as well might remember :-)) and still are to some
extent controversial (or every reviewer so far
picked at them).

Jan

The climate of Edinburgh is such that the weak succumb young .... 
and the strong envy them.
                                 Dr. Johnson


From: Benoit Claise (bclaise) 
Sent: 10 April 2012 12:08
To: ipfix@ietf.org
Cc: Jan Novak (janovak); Ron Bonica; Al Morton
Subject: No active/inactive timeout definitions in any IPFIX RFCs? Idle versus inactive terminology? (part of draft-ietf-bmwg-ipflow-meth-09 review)

Dear all,

Reading draft-ietf-bmwg-ipflow-meth-09.txt, I realized that this draft defines two new terms: Active Timeout and Inactive Timeout.
I was thinking: surely, we have defined those terms already in some IPFIX RFCs.
Actually, I was unable to find any references.... Have I overlooked something?

The only pointers I could find are in RFC5102
5.11.1.  flowActiveTimeout

   Description:
      The number of seconds after which an active Flow is timed out
      anyway, even if there is still a continuous flow of packets.
   Abstract Data Type: unsigned16
   ElementId: 36
   Status: current
   Units: seconds

5.11.2.  flowIdleTimeout


   Description:
      A Flow is considered to be timed out if no packets belonging to
      the Flow have been observed for the number of seconds specified by
      this field.
   Abstract Data Type: unsigned16
   ElementId: 37
   Status: current
   Units: seconds

5.11.3.  flowEndReason
Description:
      The reason for Flow termination.  The range of values includes the
      following:

      0x01: idle timeout
            The Flow was terminated because it was considered to be
            idle.

      0x02: active timeout
            The Flow was terminated for reporting purposes while it was
            still active, for example, after the maximum lifetime of
            unreported Flows was reached.

      ...


Here is one issue.
Some documents refer to inactive timeout
    RFC5472, 
    ipfixMeteringProcessCacheInactiveTimeout in http://tools.ietf.org/html/draft-ietf-ipfix-rfc5815bis-03
    inactiveTimeout in http://tools.ietf.org/html/draft-ietf-ipfix-configuration-model-10
While some others refer to idle timeout
    RFC 5102, 
    draft-ietf-bmwg-ipflow-meth-09

Any proposal to fix this problem?

Regards, Benoit (OPS A.D.)