Re: [sip-clf] draft-ietf-sipclf-format-01, Flag field

On Mar 15, 2011, at 1:49 PM, Anders Nygren wrote:

> Hi
> I will start writing one email for each issue in order to make it
> easier to track the different discussions.
> 
Thanks. That should help.

> I would like to propose that the Flag Field is moved from the
> <IndexPointers> to <MandatoryFields>. That way the <IndexPointers>
> will be pure metadata that can be ignored if wanted and all interesting
> data about the message is in the second line of the record.
> 
I have no real preference on this one. I'll let others weigh in with their thoughts.

> Also I think it would be good to change the Sent/Received flag from
> 
> Sent/Received flag
> 
>         u = received UDP mesage
>         t = received TCP mesage
>         l = received TLS mesage
>         U = sent UDP mesage
>         T = sent TCP mesage
>         L = sent TLS mesage
> 
> To
> Sent/Received flag [1 byte]
>         r = received message
>         s = sent message
> 
> And add
> Protocol [1 byte]
>         u = UDP
>         t = TCP
>         l = TLS
> 
> Since the proposed CLF already requires quite a lot of space there is
> little reason to
> try to pack different parameters into the same byte.

This is what was proposed early on, but the group decided on consolidating the two. I'm not violently opposed or in favor of either, but I don't see any real benefit to separating the two out since all permutations are covered in a single easy byte.

Regards,

Gonzalo
> 
> /Anders
> _______________________________________________
> sip-clf mailing list
> sip-clf@ietf.org
> https://www.ietf.org/mailman/listinfo/sip-clf