Re: [sip-clf] [sip-ops] [dispatch] SIP-CLF: Results on ASCII vs. binary representation

"Vijay K. Gurbani" <> Tue, 05 May 2009 16:02 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id C87183A6D00 for <>; Tue, 5 May 2009 09:02:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.515
X-Spam-Status: No, score=-2.515 tagged_above=-999 required=5 tests=[AWL=0.084, BAYES_00=-2.599]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id tr5Ki34p4b-o for <>; Tue, 5 May 2009 09:02:00 -0700 (PDT)
Received: from ( []) by (Postfix) with ESMTP id 9C57A3A6D9D for <>; Tue, 5 May 2009 09:01:19 -0700 (PDT)
Received: from ( []) by (8.13.8/IER-o) with ESMTP id n45G2guG027948 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 5 May 2009 11:02:43 -0500 (CDT)
Received: from [] ( []) by (8.13.8/TPES) with ESMTP id n45G2fPR027694; Tue, 5 May 2009 11:02:41 -0500 (CDT)
Message-ID: <>
Date: Tue, 05 May 2009 11:02:41 -0500
From: "Vijay K. Gurbani" <>
Organization: Bell Labs Security Technology Research Group
User-Agent: Thunderbird (Windows/20070728)
MIME-Version: 1.0
To: Adam Roach <>
References: <> <> <> <>
In-Reply-To: <>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.57 on
Cc: "" <>, Tom Taylor <>, Hadriel Kaplan <>
Subject: Re: [sip-clf] [sip-ops] [dispatch] SIP-CLF: Results on ASCII vs. binary representation
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 05 May 2009 16:02:01 -0000

Adam Roach wrote:
dean> One could design things such that each record contains an initial
dean> "structure" filed with a fixed-format  series of indices (total
dean> length, number of fields, lengths for each field, followed by
dean> variable--length data fields, tab (or other reserved char) delimited
dean> followed by a CRLF terminator (included in total-length index). This
dean> gives us records that are fast-parseable, but still human-readable.
> Yes. That is what I was proposing.

Adam: Is it possible to get a draft out on this format for
further discussion?  I am willing to pitch in and help text
out a draft with you, Dean and anyone else interested on the

There are further advantages to such a format over the simple
space-delimited ASCII format, which would need some escaping
to parse the Contact URI in the CLF file:
    sip:<>;param=" value1 value2 "


- vijay
Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60566 (USA)
Email: vkg@{,,}