[PSAMP] IPFIX/PSAMP-MIB: parameters of Property Match Filtering

[Gerhard Muenz <[e-mail]>]

Hi all,

Regarding consistency of property match filtering parameters in RFC5475
(psamp-tech), RFC5476 (psamp-proto), PSAMP-MIB, and IPFIX-MIB:

From RFC5475:

   A packet is selected if Field=Value. Masks and ranges are only
   supported to the extent to which [RFC5102] allows them, e.g., by
   providing explicit fields like the netmasks for source and
   destination addresses.

This is consistent with RFC5476.

From psamp-mib-06:

   The match filtering method has no capabilities defined and contains
   four parameters in the psampFilterMatchParamSetTable: The
   psampFilterMatchFieldId contain the PSAMP or IPFIX field id defined
   in the information model as reference what to match.  The
   psampFilterMatchStartValue and psampFilterMatchStopValue contain the
   start and stop value to match the content against.  In this way you
   can match e.g., a range x-z of transport protocol ports by specifying
   the field id that represents the transport protocol port and giving x
   as start value and y as stop value.  If a single value should be
   matched than start and stop value must be equal.  A mask
   psampFilterMatchMask can be applied if it is applicable for the field
   id.  The encoding of the values is dependent on the field id and has
   to be done according to the PSAMP protocol document.

However, defining a range (startValue, stopValue) and mask is not
consistent with RFC5475/5476.

So, what are the plans for PSAMP-MIB?
Replace psampFilterMatchStartValue, psampFilterMatchStopvalue, and
psampFilterMatchMask by a single psampFilterMatchValue?

RFC5475/5476 allow multiple Field=Value conditions in a single Selector
(AND semantic. If PSAMP-MIB is changed as sketched above, every
Field=Value condition corresponds to a row in
psampFilterMatchParamSetTable.

In this case, there are consequences for IPFIX-MIB: The
ipfixSelectorTable in IPFIX-MIB should be changed to enable the linkage
between one Selector ID and multiple rows in
psampFilterMatchParamSetTable. At the moment, the ipfixSelectorTable
only allows linking the Selector ID to a single OID
(ipfixSelectorFunction) only, which restricts property match filtering
to a single Field=Value condition per Selector.

Regards,
Gerhard


-- 
Dipl.-Ing. Gerhard Münz
Chair for Network Architectures and Services (I8)
Department of Informatics
Technische Universität München
Boltzmannstr. 3, 85748 Garching bei München, Germany
Phone:  [phone]       Fax: [phone]
E-mail: [e-mail]    WWW: http://www.net.in.tum.de/~muenz