[OPSAWG] draft-gray-sampled-streaming-01.txt

"Gray, Andrew A" <Andrew.Gray@charter.com> Thu, 26 September 2019 20:09 UTC

Return-Path: <Andrew.Gray@charter.com>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30B381200C5 for <opsawg@ietfa.amsl.com>; Thu, 26 Sep 2019 13:09:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GPjI4aswInrk for <opsawg@ietfa.amsl.com>; Thu, 26 Sep 2019 13:09:13 -0700 (PDT)
Received: from mail.chartercom.com (nce.mail.chartercom.com [142.136.234.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A93EE1200FE for <opsawg@ietf.org>; Thu, 26 Sep 2019 13:09:13 -0700 (PDT)
IronPort-SDR: u1FqQGa6eQSHz9tewWssDwan5UOJlWpbI3/9Qx0gxmoZc1KFjnMOTqi4qMvlx5LBxFzKJ2Ko9a pC8ElH9dD2kw==
X-IronPort-AV: E=Sophos;i="5.64,553,1559538000"; d="scan'208";a="70287879"
Received: from unknown (HELO NCEMEXGP007.CORP.CHARTERCOM.com) ([142.136.234.156]) by mail.chartercom.com with ESMTP; 26 Sep 2019 15:09:12 -0500
Received: from NCEMEXGP011.CORP.CHARTERCOM.COM (2002:8e88:ea10::8e88:ea10) by NCEMEXGP007.CORP.CHARTERCOM.com (2002:8e88:ea0c::8e88:ea0c) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Thu, 26 Sep 2019 15:09:11 -0500
Received: from NCEMEXGP011.CORP.CHARTERCOM.COM ([fe80::e832:53f4:2a29:ec5f]) by NCEMEXGP011.CORP.CHARTERCOM.com ([fe80::e832:53f4:2a29:ec5f%19]) with mapi id 15.00.1365.000; Thu, 26 Sep 2019 15:09:11 -0500
From: "Gray, Andrew A" <Andrew.Gray@charter.com>
To: "opsawg@ietf.org" <opsawg@ietf.org>
Thread-Topic: draft-gray-sampled-streaming-01.txt
Thread-Index: AQHVdKZCzJ9sdAPQUEmQCDYyJpA1cQ==
Date: Thu, 26 Sep 2019 20:09:11 +0000
Message-ID: <A442B3A4-A8BE-4B90-A05E-DA72ABF8F994@charter.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [142.136.234.123]
Content-Type: text/plain; charset="utf-8"
Content-ID: <DAFC09FFB16A0B43B76D971ABE15747B@chartercom.com>
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/-5CMrTlqg7RN5QIoFdDp67JCNLw>
Subject: [OPSAWG] draft-gray-sampled-streaming-01.txt
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Sep 2019 20:09:16 -0000

I have updated draft-gray-sampled-streaming with the feedback I have received to do (thank you to those that reviewed and provided that feedback).

-01 includes additional clarifications about format, clarifying how traffic direction is handled, and some other cleanups.  I have not yet had a chance to look at Flowspec for rule definitions, so that part is not in yet.

Please feel free to take a look, and am interested in getting feedback back.  Thanks!

A new version of I-D, draft-gray-sampled-streaming-01.txt
has been successfully submitted by Andrew Gray and posted to the
IETF repository.

Name:		draft-gray-sampled-streaming
Revision:	01
Title:		Sampled Traffic Streaming
Document date:	2019-09-25
Group:		Individual Submission
Pages:		18
URL:            https://www.ietf.org/internet-drafts/draft-gray-sampled-streaming-01.txt
Status:         https://datatracker.ietf.org/doc/draft-gray-sampled-streaming/
Htmlized:       https://tools.ietf.org/html/draft-gray-sampled-streaming-01
Htmlized:       https://datatracker.ietf.org/doc/html/draft-gray-sampled-streaming
Diff:           https://www.ietf.org/rfcdiff?url2=draft-gray-sampled-streaming-01

Abstract:
   This document standardizes the means of requesting a sampled capture
   stream from a router, receiving details about the resulting data
   flow, and the structure of the data flow itself.  This is
   specifically tailored to having various hardware ASICs be able to
   perform this operation as quickly as possible, by allowing
   communication of the specific bit formats of headers applied to the
   packet flow, in a way that enhances interoperability between sources
   and sinks.  Historically, NetFlow and its ilk have been used for
   these use cases, however the growth in hardware forward speeds is far
   outpacing the growth in CPU speeds, and the CPU-heavy parts of
   NetFlow is resulting in a reduction of sampling rates that include
   all of the fields provided by NetFlow that require CPU lookups.

 

E-MAIL CONFIDENTIALITY NOTICE: 
The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.