Re: [sip-clf] draft-salgueiro-sipclf-indexed-ascii-00

Peter Musgrave <peter.musgrave@magorcorp.com> Mon, 05 July 2010 22:20 UTC

Return-Path: <peter.musgrave@magorcorp.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7F8943A688C for <sip-clf@core3.amsl.com>; Mon, 5 Jul 2010 15:20:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.772
X-Spam-Level:
X-Spam-Status: No, score=-0.772 tagged_above=-999 required=5 tests=[AWL=-0.285, BAYES_05=-1.11, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H8fw0dU9Ugnl for <sip-clf@core3.amsl.com>; Mon, 5 Jul 2010 15:20:45 -0700 (PDT)
Received: from mail-qw0-f44.google.com (mail-qw0-f44.google.com [209.85.216.44]) by core3.amsl.com (Postfix) with ESMTP id A914A3A68D3 for <sip-clf@ietf.org>; Mon, 5 Jul 2010 15:20:45 -0700 (PDT)
Received: by qwe5 with SMTP id 5so2095330qwe.31 for <sip-clf@ietf.org>; Mon, 05 Jul 2010 15:20:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.224.36.15 with SMTP id r15mr1865483qad.333.1278368444147; Mon, 05 Jul 2010 15:20:44 -0700 (PDT)
Received: by 10.229.220.10 with HTTP; Mon, 5 Jul 2010 15:20:43 -0700 (PDT)
In-Reply-To: <AANLkTinW-dgCYtgpQ9O7dFGRS8kaZn7-okiiOg4c3EMz@mail.gmail.com>
References: <AANLkTinW-dgCYtgpQ9O7dFGRS8kaZn7-okiiOg4c3EMz@mail.gmail.com>
Date: Mon, 05 Jul 2010 18:20:43 -0400
Message-ID: <AANLkTin7HnHV7Sur1XOntUgDXj5X3TFBS06EMOO7ydPS@mail.gmail.com>
From: Peter Musgrave <peter.musgrave@magorcorp.com>
To: List SIP-CLF Mailing <sip-clf@ietf.org>, Gonzalo Salgueiro <gsalguei@cisco.com>
Content-Type: multipart/alternative; boundary="00c09f9722f7016ad0048aab59ee"
Subject: Re: [sip-clf] draft-salgueiro-sipclf-indexed-ascii-00
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Jul 2010 22:20:48 -0000

(as individual)

Hi Gonzalo,

Looking at the format in section 3 it seems to me that when I use my
debugging tool of first resort, vim, that the first columns I will see are a
series of hex values (and not the data I am keen on). (I am anticipating the
examples here a bit - so let me know if I'm wrong).

Do you think the length/pointer stuff could be moved after the timestamp and
mandatory fields (perhaps with a single pointer to the start of this block
at the start of a message).

I can see the value of the TLV stuff for non-mandatory fields. For the
mandatory fields do we need both pointer and length? Could we not infer
length from the value of the next pointer in the list and save 1/2 the space
for the block of pointers for mandatory fields (at the expense of
subtracting two values) ?

Regards,

Peter





On Mon, Jul 5, 2010 at 5:54 PM, Peter Musgrave <peter.musgrave@magorcorp.com
> wrote:

> Hi,
>
> Apologies if this was already posted (but I don't remember seeing it).
>
> There is now a -00 draft describing the indexed ascii logging proposal for
> sipclf.
>
> Thanks to Gonzalo S. for getting this in on time for the IETF78 cut-off.
>
> http://tools.ietf.org/id/draft-salgueiro-sipclf-indexed-ascii-00.txt
>
> Also, if there are additional agenda requests please let me know in the
> next 2 days. I will submit a preliminary agenda on Wed.
>
> Regards
>
> Peter Musgrave
> Co-Chair
> SIPCLF
>