Re: [sip-clf] draft CLF charter
"DRAGE, Keith (Keith)" <drage@alcatel-lucent.com> Mon, 20 July 2009 16:23 UTC
Return-Path: <drage@alcatel-lucent.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5ECAC28C1C8 for <sip-clf@core3.amsl.com>; Mon, 20 Jul 2009 09:23:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.505
X-Spam-Level:
X-Spam-Status: No, score=-3.505 tagged_above=-999 required=5 tests=[AWL=-1.255, BAYES_00=-2.599, HELO_EQ_FR=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ETnOk7nnhHmw for <sip-clf@core3.amsl.com>; Mon, 20 Jul 2009 09:23:10 -0700 (PDT)
Received: from smail6.alcatel.fr (smail6.alcatel.fr [64.208.49.42]) by core3.amsl.com (Postfix) with ESMTP id 2A29D28C1B7 for <sip-clf@ietf.org>; Mon, 20 Jul 2009 09:23:09 -0700 (PDT)
Received: from FRMRSSXCHHUB04.dc-m.alcatel-lucent.com (FRMRSSXCHHUB04.dc-m.alcatel-lucent.com [135.120.45.64]) by smail6.alcatel.fr (8.13.8/8.13.8/ICT) with ESMTP id n6KGLLAR009823 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Mon, 20 Jul 2009 18:21:21 +0200
Received: from FRMRSSXCHMBSC3.dc-m.alcatel-lucent.com ([135.120.45.47]) by FRMRSSXCHHUB04.dc-m.alcatel-lucent.com ([135.120.45.64]) with mapi; Mon, 20 Jul 2009 18:21:21 +0200
From: "DRAGE, Keith (Keith)" <drage@alcatel-lucent.com>
To: Robert Sparks <rjsparks@nostrum.com>, "sip-clf@ietf.org" <sip-clf@ietf.org>
Date: Mon, 20 Jul 2009 18:21:24 +0200
Thread-Topic: [sip-clf] draft CLF charter
Thread-Index: AcoHI4m7QIuNfGrGS8+mXOMoVgHQ/ACMgiNQ
Message-ID: <EDC0A1AE77C57744B664A310A0B23AE20707CECC@FRMRSSXCHMBSC3.dc-m.alcatel-lucent.com>
References: <3B33A97D-7E19-4A08-A431-A085D53A2A6E@nostrum.com> <D5E606B8-0811-4D40-AA76-ED989B00FD02@nostrum.com>
In-Reply-To: <D5E606B8-0811-4D40-AA76-ED989B00FD02@nostrum.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Scanned-By: MIMEDefang 2.57 on 155.132.188.84
Subject: Re: [sip-clf] draft CLF charter
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jul 2009 16:23:17 -0000
Just to note that previously the input from the other area director was to provide separate milestones for taking a draft to WGLC and publication request to IESG. > We'll also be discussing this in Thursday's opsarea meeting. > Can you clarify what you mean by this? All discussion will henceforward be in opsarea or just seeking their input to continuing discussion on the dispatch mailing list. regards Keith > -----Original Message----- > From: sip-clf-bounces@ietf.org > [mailto:sip-clf-bounces@ietf.org] On Behalf Of Robert Sparks > Sent: Friday, July 17, 2009 10:14 PM > To: sip-clf@ietf.org > Subject: [sip-clf] draft CLF charter > > All - > > We are working on forming a CLF working group based on > DISPATCH's decision. > > Below is a proposed charter for this working group. Please > review and comment on this list. Depending on the feedback we > receive, we will target forming this group shortly after the > Stockholm meeting. > > We'll also be discussing this in Thursday's opsarea meeting. > > Thanks, > > RjS > > > > The SIP Common Log File (CLF) working group is chartered to > define a > > standard logging format for systems processing SIP messages. > > > > Well-known web servers such as Apache and web proxies like Squid > > support event logging using a common log format. The logs produced > > using these de-facto standard formats are invaluable to system > > administrators for trouble-shooting a server and tool > writers to craft > > tools that mine the log files to produce reports and trends and to > > search for a certain SIP message or messages, a transaction or a > > related set of transactions. Furthermore, these log > records can also > > be used to train anomaly detection systems and feed events into a > > security event management system. > > > > The Session Initiation Protocol does not have a common log format. > > Diverse element provide distinct log formats making it complex to > > produce tools to analyze them. > > > > The CLF working group will produce a format suitable for > logging from > > any SIP element. The format will anticipate the need to > search, merge, > > and summarize the log records from diverse elements. > > The format will anticipate the need to correlate messages from > > multiple elements related to a given request (that may fork) or a > > given dialog. The format will take SIP's extensibility into > > consideration, providing a way to represent SIP message components > > that are defined in the future. The format will anticipate > being used > > both for off-line analysis and on-line real-time processing > > applications. The working group will consider the need for > efficient > > processing in its design of this format. > > > > The working group is not pre-constrained to producing either a > > bit-field oriented or text-oriented format, and may choose > to provide > > both. If the group chooses to specify both, it must be possible to > > mechanically translate between the formats without loss of > > information. > > > > Specifying the mechanics of exchanging, transporting, and > storing SIP > > Common Log Format records is explicitly out of scope. Specifying a > > real-time transfer mechanism for heuristic analysis is > explicitly out > > of scope. > > > > The group will generate: > > > > - A problem statement enunciating the motivation, and use > cases for a > > SIP Common Log Format. This analysis will identify the required > > minimal information that must appear in any record. > > > > - A specification of the SIP Common Log Format record. > > > > The group will consider providing one or more reference > > implementations for decoding a CLF record. > > > > Goals and Milestones > > =========================== > > > > Nov 09 - Problem statement, motivation, and use cases to IESG > > (Informational) > > Feb 10 - SIP Common Log Format specification to IESG (PS) > > > > _______________________________________________ > sip-clf mailing list > sip-clf@ietf.org > https://www.ietf.org/mailman/listinfo/sip-clf >
- [sip-clf] draft CLF charter Robert Sparks
- Re: [sip-clf] draft CLF charter Romascanu, Dan (Dan)
- Re: [sip-clf] draft CLF charter DRAGE, Keith (Keith)
- Re: [sip-clf] draft CLF charter Vijay K. Gurbani
- Re: [sip-clf] draft CLF charter Hadriel Kaplan
- Re: [sip-clf] draft CLF charter Romascanu, Dan (Dan)
- Re: [sip-clf] draft CLF charter Romascanu, Dan (Dan)
- Re: [sip-clf] draft CLF charter Robert Sparks
- Re: [sip-clf] draft CLF charter Vijay K. Gurbani
- Re: [sip-clf] draft CLF charter Vijay K. Gurbani
- Re: [sip-clf] draft CLF charter Spencer Dawkins
- Re: [sip-clf] draft CLF charter Romascanu, Dan (Dan)
- Re: [sip-clf] draft CLF charter Robert Sparks
- Re: [sip-clf] draft CLF charter Theo Zourzouvillys
- Re: [sip-clf] draft CLF charter Hadriel Kaplan
- Re: [sip-clf] draft CLF charter Romascanu, Dan (Dan)
- Re: [sip-clf] draft CLF charter Vijay K. Gurbani
- Re: [sip-clf] draft CLF charter David Harrington
- Re: [sip-clf] draft CLF charter Romascanu, Dan (Dan)
- Re: [sip-clf] draft CLF charter Juergen Quittek
- Re: [sip-clf] draft CLF charter Spencer Dawkins