Re: [sip-clf] I-D Action:draft-ietf-sipclf-problem-statement-00.txt

"Spencer Dawkins" <> Thu, 11 February 2010 16:22 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 279483A773A for <>; Thu, 11 Feb 2010 08:22:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.587
X-Spam-Status: No, score=-2.587 tagged_above=-999 required=5 tests=[AWL=0.011, BAYES_00=-2.599, STOX_REPLY_TYPE=0.001]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id yC2y26lrBTFq for <>; Thu, 11 Feb 2010 08:22:32 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id 0AB2B28C1E0 for <>; Thu, 11 Feb 2010 08:22:32 -0800 (PST)
Received: from S73602b ( []) by (node=mrus3) with ESMTP (Nemesis) id 0M6zfx-1NsCaz1lPJ-00xAm0; Thu, 11 Feb 2010 11:23:45 -0500
Message-ID: <>
From: "Spencer Dawkins" <>
To: <>
References: <>
Date: Thu, 11 Feb 2010 10:23:41 -0600
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5843
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-Provags-ID: V01U2FsdGVkX1+3PV1avCgv+OTB/QRqLrUUn4dbGX5j6jYE4pe k+mpiD8jOJSPHWZnsQOckr6tVBGsKJhCdKRTjnZvIwHjMLyMOl /9FidLyu+dS9mmGyRzNvBK5LkJqV7i45H+S05qqOeY=
Subject: Re: [sip-clf] I-D Action:draft-ietf-sipclf-problem-statement-00.txt
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 11 Feb 2010 16:22:33 -0000

OK, this is great. We have our first working group draft, which actually 
means the working group is responsible for reviewing the draft contents and 
proposing new text (not just watching Vijay type!).

We know we have suggestions from the WGLC responses for changes - please 
help Vijay develop the next revision quickly. I'd love to have a draft we 
can forward for publication after Anaheim, and Anaheim isn't very far off.

Spencer, as co-chair

>A New Internet-Draft is available from the on-line Internet-Drafts 
> This draft is a work item of the SIP Common Log Format Working Group of 
> the IETF.
> Title           : The Common Log Format (CLF) for the Session Initiation 
> Protocol (SIP)
> Author(s)       : V. Gurbani, et al.
> Filename        : draft-ietf-sipclf-problem-statement-00.txt
> Pages           : 15
> Date            : 2010-02-08
> Well-known web servers such as Apache and web proxies like Squid
> support event logging using a common log format.  The logs produced
> using these de-facto standard formats are invaluable to system
> administrators for trouble-shooting a server and tool writers to
> craft tools that mine the log files and produce reports and trends.
> Furthermore, these log files can also be used to train anomaly
> detection systems and feed events into a security event management
> system.  The Session Initiation Protocol does not have a common log
> format, and as a result, each server supports a distinct log format
> that makes it unnecessarily complex to produce tools to do trend
> analysis and security detection.  We propose a common log file format
> for SIP servers that can be used uniformly by proxies, registrars,
> redirect servers as well as back-to-back user agents.
> A URL for this Internet-Draft is:
> Internet-Drafts are also available by anonymous FTP at:
> Below is the data which will enable a MIME compliant mail reader
> implementation to automatically retrieve the ASCII version of the
> Internet-Draft.


> _______________________________________________
> sip-clf mailing list