[sip-clf] optional fields in sipclf

Hadriel Kaplan <HKaplan@acmepacket.com> Sun, 14 November 2010 19:39 UTC

Return-Path: <HKaplan@acmepacket.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A5C883A6C1E for <sip-clf@core3.amsl.com>; Sun, 14 Nov 2010 11:39:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.089
X-Spam-Level:
X-Spam-Status: No, score=-2.089 tagged_above=-999 required=5 tests=[AWL=0.510, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O787q-ZFzzSE for <sip-clf@core3.amsl.com>; Sun, 14 Nov 2010 11:39:25 -0800 (PST)
Received: from etmail.acmepacket.com (etmail.acmepacket.com [216.41.24.6]) by core3.amsl.com (Postfix) with ESMTP id BCF0E3A6B5E for <sip-clf@ietf.org>; Sun, 14 Nov 2010 11:39:25 -0800 (PST)
Received: from mail.acmepacket.com (216.41.24.7) by etmail.acmepacket.com (216.41.24.6) with Microsoft SMTP Server (TLS) id 8.2.254.0; Sun, 14 Nov 2010 14:40:04 -0500
Received: from mail.acmepacket.com ([127.0.0.1]) by mail ([127.0.0.1]) with mapi; Sun, 14 Nov 2010 14:39:51 -0500
From: Hadriel Kaplan <HKaplan@acmepacket.com>
To: "sip-clf@ietf.org Mailing" <sip-clf@ietf.org>
Date: Sun, 14 Nov 2010 14:39:47 -0500
Thread-Topic: optional fields in sipclf
Thread-Index: AcuEM7RJNpDndepsSwGi588MLdW+0w==
Message-ID: <297D265A-5CC2-4D3D-9C07-E57FDF6B0CEA@acmepacket.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [sip-clf] optional fields in sipclf
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 Nov 2010 19:39:26 -0000

Currently the indexed-ascii format does optional fields with (in ABNF):
*(TAB tag-hex COMMA length-hex COMMA value-string)

So an example would be:
<mandatory fields>	01,07,foo.bar	02,0b,hello world

Why can't we just do:
*(SP tag-num EQUAL DQUOTE value-string DQUOTE)

so an example would be:
<mandatory fields> 1="foo.bar" 2="hello world"

That way it's easier to read, and non-existence could be 1=- and non-parse could be 1=X.

Also, the use of numbers or hex to define tags doesn't accommodate vendor-specific fields, does it?
I'll send a separate email on that.

-hadriel