Re: [netmod] WG Last Call for draft-ietf-netmod-syslog-model-15

"Clyde Wildes (cwildes)" <cwildes@cisco.com> Sat, 12 August 2017 02:05 UTC

Return-Path: <cwildes@cisco.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D66AF132486 for <netmod@ietfa.amsl.com>; Fri, 11 Aug 2017 19:05:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.52
X-Spam-Level:
X-Spam-Status: No, score=-14.52 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TT0YQbKXyUip for <netmod@ietfa.amsl.com>; Fri, 11 Aug 2017 19:05:09 -0700 (PDT)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D100F13246A for <netmod@ietf.org>; Fri, 11 Aug 2017 19:05:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8138; q=dns/txt; s=iport; t=1502503508; x=1503713108; h=from:to:subject:date:message-id:references:content-id: content-transfer-encoding:mime-version; bh=iM1j3EGzdmMkWP+rSmkdGNVKVFtXO/9JGesnAkInXOs=; b=JT0K9ljMQpYAY3k9kkLdjD0rxHKf19AF2DIQ3UAMNl4Y7cg3ML5wvLnE AuUqByHVGj7uN5gcuPOYuMMZcJIttwS27VSd1pvdWiQn1S2buTJtKU5Uf U6+1bJ6Km3/Y8eAJ/XmZ8TYgnVoLtGO96Po7eu8SyJzYF6Hg7rx2w6pBW 4=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0C2AAB/YY5Z/5JdJa1dGQEBAQEBAQEBAQEBBwEBAQEBg1pkOFwHjgqQDZgFghIhC4RMTxyEXD8YAQIBAQEBAQEBayiFGQYBARsGETcDGwIBCA4MAiYCAgIlCxUQAgQBEoovEKsogiaLYwEBAQEBAQEBAQEBAQEBAQEBAQEBARgFgQuCHYExUYFMgWIBK4FwgQyEXS2CfDCCMQWRBI8iAodRjGeCD4Vdg3qGbpYSAR84gQp3FUkSAYUEHIFndogxgQ8BAQE
X-IronPort-AV: E=Sophos;i="5.41,360,1498521600"; d="scan'208";a="279530966"
Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Aug 2017 02:05:08 +0000
Received: from XCH-RCD-013.cisco.com (xch-rcd-013.cisco.com [173.37.102.23]) by rcdn-core-10.cisco.com (8.14.5/8.14.5) with ESMTP id v7C257Ep002987 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 12 Aug 2017 02:05:07 GMT
Received: from xch-aln-015.cisco.com (173.36.7.25) by XCH-RCD-013.cisco.com (173.37.102.23) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 11 Aug 2017 21:05:07 -0500
Received: from xch-aln-015.cisco.com ([173.36.7.25]) by XCH-ALN-015.cisco.com ([173.36.7.25]) with mapi id 15.00.1210.000; Fri, 11 Aug 2017 21:05:06 -0500
From: "Clyde Wildes (cwildes)" <cwildes@cisco.com>
To: Kent Watsen <kwatsen@juniper.net>, "netmod@ietf.org" <netmod@ietf.org>
Thread-Topic: [netmod] WG Last Call for draft-ietf-netmod-syslog-model-15
Thread-Index: AQHS+qgfFNU1WyBT406RudsboUthDA==
Date: Sat, 12 Aug 2017 02:05:06 +0000
Message-ID: <0558E64E-2CE7-4C3E-94C8-1CA7CE78171E@cisco.com>
References: <A9577A53-2B74-49E5-B87A-118C4AC4E2ED@juniper.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.20.145.6]
Content-Type: text/plain; charset="utf-8"
Content-ID: <0EE14168BA24E547B0F718DBCCF329B2@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/iR7iQ0qgHiAsEPeAgP4m5n3jxsE>
Subject: Re: [netmod] WG Last Call for draft-ietf-netmod-syslog-model-15
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Aug 2017 02:05:11 -0000

Kent,

Thanks for your exhaustive review. I will be publishing the revised model momentarily.

Comments inline as [clyde].

On 7/12/17, 2:55 PM, "netmod on behalf of Kent Watsen" <netmod-bounces@ietf.org on behalf of kwatsen@juniper.net> wrote:

    As shepherd, yang doctor, and individual contributor, following is 
    my LC/YD review.
    
    1. Because I know this draft will not be presented in Prague, I first
    checked to see if it was NMDA-compatible.  The draft contains just
    one module, and it only contains config true nodes (no config false
    nodes).  There is no companion "-state" module in the Appendix.  As
    far as I can tell, all this is accurate, as I don't believe this 
    module needs to do anything special to be NMDA compatible.  Agreed?
    
[clyde] Agreed.

    2. the abstract seems just a little bland.  Is there any way to beef
    it up with a sentence or two?

[clyde] Done.
    
    3. S1, P1, last sentence.  s/the messages/these messages/?

[clyde] Done.
    
    4. S1, P3, 1st sentence: "and processes those"?  - rewrite sentence?

[clyde] Done.
    
    5. S1 as a whole.  I'm a bit unclear what this section is doing.  It
    seems to be a general summary of Syslog (RFC5424).  Do we need this here?

[clyde] Suggestions appreciated. I wanted to provide a high level overview of the syslog process. I cleaned it up a little.
    
    6. S1.1: you should also reference RFC8174 here.

[clyde] Done
    
    7. S1.2: three terms come from 5424, but only one has its definition
       provided.  This seems inconsistent...

[clyde] Done
    
    8. S2: s/6020/7950/

[clyde] done
    
    9. S3, P3: this paragraph is hard to read due to the previous paragraph
    talking about proprietary features.  Maybe replace the beginning of the 
    sentence to read "Some optional features are defined in this document
    to specify"?

[clyde] done
    
    10. S3, P4: The diagram appears to show multiple originators, not 
    just one, so s/an originator/originators/?  Also, I don't think 
    either of the commas are needed.

[clyde] done
    
    11. S3, P6: This paragraph starts a new aspect of the design, right?
    This is likely just a text-rendering issue, but the transition from
    the diagram above (Figure 1) to this line is not visible.  Can you
    provide a transition sentence?

[clyde] done
    
    12. S3, P8: I'm having trouble understanding the pseudocode.  What
    happens if S and/or F are not present?  Can S or F ever not be
    present? - looking at the tree diagram, it seems like they might
    always be set to something in the model.

[clyde] S or F might not be present. 

       The operative sentence in the pseudocode is: 
       There is an element of facility-list (F, S)…
       or the message text matches the regex pattern (if it is present)
    
    13. S3.1, P1: RFC 6087 did not define tree diagram notation, and
    rfc6087bis references the tree-diagram draft.  I don't think that
    it is safe for this draft to reference the tree-diagram draft, as
    that draft is unstable (the notation may change).  You should 
    probably copy/paste the Tree Diagram Notation section found in
    other drafts today (especially mine).

[clyde] I used to the Tree Diagram Notation embedded in the document and was
asked by another reviewer to use what is there now. I will change to your document’s 
notation.
    
    14. S3.1: is /syslog/actions/remote/destination/tls/ missing an
    'address' leaf?

[clyde] not as far as I know
    
    15. S4.1, P1: Doesn't the module import *groupings* from ietf-keystore
    and ietf-tls-client?

[clyde] done
    
    16. S4.1, though it's not in 6087bis, I think that it is best
    practice for 'import' statements to include a 'reference'
    substatement:
    
      import ietf-keystore {
        prefix ks;
        reference
          "RFC YYYY: Keystore Model";
      }
    
    17. S4.1, imports that are used for groupings only should use a
    revision statement:
    
      import ietf-tls-client {
        prefix tlsc;
        revision-date YYYY-MM-DD; // stable grouping definitions
        reference
          "RFC ZZZZ: TLS Client and Server Models";
      }

[clyde] done
    
    18. S4.1, can you put the beginning of the 'organization' (i.e. "IETF")
    on the next line, s/NETCONF Data Modeling Language/Network Modeling/,
    and put a blank line in after the 'organization' line?

[clyde] done
    
    19. S4.1, in the 'severity-filter' grouping, why does leaf 'severity'
    have values set for enums 'none' and 'all'?  When would these values
    be used, as opposed to the enum's name string?  If you do need values,
    then shouldn't 'none' be 2147483647 (so nothing can be greater than it)
    and 'all' be -2147483648 (so everything is greater than it)?

[clyde] ‘none’ and ‘all’ are set to values that are not defined in RFC 5424. These values
were previously suggested by Martin Björklund
    
    20. S7: can you indent the two blocks of details so the whole thing
    reads better?

[clyde] I searched for an example that shows how to do this in XML and couldn’t find the keyword.
    
    21. S8: please rework so this section so it matches the new template
    at: https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines

[clyde] done
    
    22. S8.1: it would be better if the third paragraph was moved up to
    become the first paragraph.

[clyde] done
    
Thanks,

Clyde

    
    DISCLAIMER: I'm not a syslog expert, but have interacted with it,
    including structured-syslog, over the years.
    
    Kent
    
    
    
    _______________________________________________
    netmod mailing list
    netmod@ietf.org
    https://www.ietf.org/mailman/listinfo/netmod