[sip-clf] draft-ietf-sipclf-format-01, Flag field

[Anders Nygren <[e-mail]>]

Hi
I will start writing one email for each issue in order to make it
easier to track the different discussions.

I would like to propose that the Flag Field is moved from the
<IndexPointers> to <MandatoryFields>. That way the <IndexPointers>
will be pure metadata that can be ignored if wanted and all interesting
data about the message is in the second line of the record.

Also I think it would be good to change the Sent/Received flag from

Sent/Received flag

         u = received UDP mesage
         t = received TCP mesage
         l = received TLS mesage
         U = sent UDP mesage
         T = sent TCP mesage
         L = sent TLS mesage

To
Sent/Received flag [1 byte]
         r = received message
         s = sent message

And add
Protocol [1 byte]
         u = UDP
         t = TCP
         l = TLS

Since the proposed CLF already requires quite a lot of space there is
little reason to
try to pack different parameters into the same byte.

/Anders