Re: [sip-clf] draft-niccolini-sipclf-ipfix-02

Peter Musgrave <peter.musgrave@magorcorp.com> Tue, 01 June 2010 11:03 UTC

Return-Path: <peter.musgrave@magorcorp.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9F3CC28C0EE for <sip-clf@core3.amsl.com>; Tue, 1 Jun 2010 04:03:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.623
X-Spam-Level:
X-Spam-Status: No, score=0.623 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LfG61XXL7kA5 for <sip-clf@core3.amsl.com>; Tue, 1 Jun 2010 04:03:22 -0700 (PDT)
Received: from mail-yw0-f182.google.com (mail-yw0-f182.google.com [209.85.211.182]) by core3.amsl.com (Postfix) with ESMTP id D210628C0E9 for <sip-clf@ietf.org>; Tue, 1 Jun 2010 04:03:21 -0700 (PDT)
Received: by ywh12 with SMTP id 12so4371868ywh.19 for <sip-clf@ietf.org>; Tue, 01 Jun 2010 04:03:07 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.151.18.38 with SMTP id v38mr6020607ybi.420.1275390187081; Tue, 01 Jun 2010 04:03:07 -0700 (PDT)
Received: by 10.150.199.12 with HTTP; Tue, 1 Jun 2010 04:03:07 -0700 (PDT)
Date: Tue, 01 Jun 2010 07:03:07 -0400
Message-ID: <AANLkTilSs-SQ5qKrGrvpSWIjwOJNRC7Y7Dh0yR3hEXue@mail.gmail.com>
From: Peter Musgrave <peter.musgrave@magorcorp.com>
To: niccolini@nw.neclab.eu, bclaise@cisco.com, brian.trammell@hitachi-eu.com, hkaplan@acmepacket.com, sip-clf@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Subject: Re: [sip-clf] draft-niccolini-sipclf-ipfix-02
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Jun 2010 11:03:22 -0000

Hi IPFIX authors/sipclf:

Some comments on the IPFIX advantages draft:

Introduction
2nd paragraph
- add a reference where IPFIX is first mentioned (is this a reference
to NetFlow 9/RFC3954?) Should the IPFIX architecture be cited
(RFC5470)?

"There are a number of applicable tools"
- is it worth referencing any? Are any open-source?

2.0 NIT:
"These points suggest that, even if today file format has potentially"
add "the IPFIX" after today.

4. Information Model
- should this discussion be incorporated into the problem statement?
(It appears to me the current problem  statement favours 'fine
grained')


Does the draft need to use some of the language from the architecture
doc and discuss the SIP observation point with respect to the NIC and
the SIP stack? Should it discuss possible metering? (As I read 5470
every observation point should have a metering process)
[Or does this stuff belong in the eventual IPFIX-SIPCLF draft]

5.
- I would prefer millisecond level time.
NIT: reference to be updated to WG version of problem statement.

Regards,

Peter Musgrave
(individual)