[sip-clf] draft-niccolini-sipclf-ipfix-04

Peter Musgrave <peter.musgrave@magorcorp.com> Sun, 12 September 2010 20:41 UTC

Return-Path: <peter.musgrave@magorcorp.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60ADB3A67AE for <sip-clf@core3.amsl.com>; Sun, 12 Sep 2010 13:41:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.666
X-Spam-Level:
X-Spam-Status: No, score=-100.666 tagged_above=-999 required=5 tests=[AWL=-1.289, BAYES_50=0.001, FM_FORGED_GMAIL=0.622, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z5nYogU7K6WY for <sip-clf@core3.amsl.com>; Sun, 12 Sep 2010 13:41:29 -0700 (PDT)
Received: from mail-qy0-f172.google.com (mail-qy0-f172.google.com [209.85.216.172]) by core3.amsl.com (Postfix) with ESMTP id F19E93A67A4 for <sip-clf@ietf.org>; Sun, 12 Sep 2010 13:41:27 -0700 (PDT)
Received: by qyk1 with SMTP id 1so1244046qyk.10 for <sip-clf@ietf.org>; Sun, 12 Sep 2010 13:41:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.224.28.207 with SMTP id n15mr2271662qac.48.1284324113831; Sun, 12 Sep 2010 13:41:53 -0700 (PDT)
Received: by 10.229.72.135 with HTTP; Sun, 12 Sep 2010 13:41:53 -0700 (PDT)
Date: Sun, 12 Sep 2010 16:41:53 -0400
Message-ID: <AANLkTikAhfTjazdXtwVobUt0jVwfn_T7MyyL8rtfeqPc@mail.gmail.com>
From: Peter Musgrave <peter.musgrave@magorcorp.com>
To: niccolini@neclab.eu, Brian Trammell <trammell@tik.ee.ethz.ch>, Hadriel Kaplan <HKaplan@acmepacket.com>, bclaise@cisco.com, List SIP-CLF Mailing <sip-clf@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Subject: [sip-clf] draft-niccolini-sipclf-ipfix-04
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 12 Sep 2010 20:41:30 -0000

Hi IPFIXers,

(as individual)

I have started on implementing both formats so I can make a relative
comparison.

Some questions about the IPFIX draft:

In Figure 2 and 3 the base request and response templates are listed.
Can the order in the response template be altered so protocol
identifier precedes SIpResponseStatus? This makes the two templates
common up to this point (and saves an IF stmt in the implementation)?

In the example of templates in Figure 6 the template comment and log
data show 16 data elements. I only count 15 in the template in Figure
2 and 3. It seems that sipServerTransaction is provided in the example
but not
listed in Fig 2 and 3.

In the example in figure at 0040: 81 92 should (I think) be followed
by an entry for 81 a3 (to correspond to 419 sipObservation type) and
then 81 93 etc.


Regards,

Peter Musgrave