[secdir] secdir review of draft-ietf-mboned-mtrace-v2

"Dan Harkins" <dharkins@lounge.org> Thu, 14 July 2011 19:39 UTC

Return-Path: <dharkins@lounge.org>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id C63D321F87A2; Thu, 14 Jul 2011 12:39:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.265
X-Spam-Status: No, score=-6.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id AS9sljaEwCDo; Thu, 14 Jul 2011 12:39:23 -0700 (PDT)
Received: from colo.trepanning.net (colo.trepanning.net []) by ietfa.amsl.com (Postfix) with ESMTP id 57D0821F8748; Thu, 14 Jul 2011 12:39:23 -0700 (PDT)
Received: from www.trepanning.net (localhost []) by colo.trepanning.net (Postfix) with ESMTP id A2CA4A888108; Thu, 14 Jul 2011 12:39:22 -0700 (PDT)
Received: from (SquirrelMail authenticated user dharkins@lounge.org) by www.trepanning.net with HTTP; Thu, 14 Jul 2011 12:39:22 -0700 (PDT)
Message-ID: <d665f5de93ea34fe7e536cdbe903f495.squirrel@www.trepanning.net>
Date: Thu, 14 Jul 2011 12:39:22 -0700 (PDT)
From: "Dan Harkins" <dharkins@lounge.org>
To: draft-ietf-mboned-mtrace-v2.all@tools.ietf.org, iesg@ietf.org, secdir@ietf.org
User-Agent: SquirrelMail/1.4.14 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Subject: [secdir] secdir review of draft-ietf-mboned-mtrace-v2
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Jul 2011 19:39:23 -0000


  I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

  This draft specifies version 2 of mtrace, a multicast traceroute
facility. It provides a way to diagnose some issues with multicast
like packet loss and isolation of configuration problems. Each
router on the reverse path towards a source adds quite a bit of
information to a mtrace2 response and the draft discusses how to
diagnose problems using this information. mtrace2 seems like a useful
tool and can discover quite a bit about a network. The security
considerations deal with the fact that some of that information might
be restricted and, in that case, recommends not forwarding mtrace2 into
the network and replying appropriately-- administratively prohibited.
That seems appropriate.

  I see no issues with this draft.