[sip-clf] Protocol Action: 'The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model' to Proposed Standard (draft-ietf-sipclf-problem-statement-13.txt)

The IESG <iesg-secretary@ietf.org> Wed, 09 January 2013 20:55 UTC

Return-Path: <iesg-secretary@ietf.org>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2A2A1F0CFB; Wed, 9 Jan 2013 12:55:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.413
X-Spam-Level:
X-Spam-Status: No, score=-102.413 tagged_above=-999 required=5 tests=[AWL=0.186, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CdUYw3w2iUWw; Wed, 9 Jan 2013 12:55:30 -0800 (PST)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4359C1F0D04; Wed, 9 Jan 2013 12:55:30 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.37
Message-ID: <20130109205530.857.2570.idtracker@ietfa.amsl.com>
Date: Wed, 09 Jan 2013 12:55:30 -0800
Cc: sipclf chair <sipclf-chairs@tools.ietf.org>, sipclf mailing list <sip-clf@ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [sip-clf] Protocol Action: 'The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model' to Proposed Standard (draft-ietf-sipclf-problem-statement-13.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Jan 2013 20:55:31 -0000

The IESG has approved the following document:
- 'The Common Log Format (CLF) for the Session Initiation Protocol (SIP):
   Framework and Information Model'
  (draft-ietf-sipclf-problem-statement-13.txt) as Proposed Standard

This document is the product of the SIP Common Log Format Working Group.

The IESG contact persons are Robert Sparks and Gonzalo Camarillo.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-sipclf-problem-statement/




Technical Summary:

The Session Initiation Protocol does not have a common log
format, and as a result, each server supports a distinct log format
that makes it unnecessarily complex to produce tools to do trend
analysis and security detection.  This document provides motivation
for a common format and defines a framework and data model for such 
a log as well as a need to allow extensions.

Working Group Summary:

There were some issues with respect the choice of indexed-ascii versus binary 
representation. This stalled the WG progress for a number of meetings. 
There was significant discussion about whether to create this standalone format,
or build withing syslog or IPFix. The technical implications of working within IPFix
were explored and the data model documented here could be used with IPFix. 
The  working group decided to move ahead with the standalone format documented
in draft-ietf-sipclf-format, and this final product has good support in the WG.

A previous version of this document received IESG review. This review raised issues
about the scope of the document (it is more than a problem statement), and technical
concerns involving internationalization.

Document Quality:

There were sample implementations of the indexed ascii format written by 
Peter Musgrave and placed on the sipclf Wiki page 
(<http://trac.tools.ietf.org/wg/sipclf/trac/wiki>). 
Vijay Gurbani reports that three other implementations are known.


Personnel:

Peter Musgrave is the document shepherd. Robert Sparks in the responsible AD.