[sip-clf] Vendor extensions in draft-ietf-sipclf-format-01.txt

Anders Nygren <anders.nygren@gmail.com> Tue, 15 March 2011 02:51 UTC

Return-Path: <anders.nygren@gmail.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 920293A6973 for <sip-clf@core3.amsl.com>; Mon, 14 Mar 2011 19:51:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level:
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x-AwRRAEOdTT for <sip-clf@core3.amsl.com>; Mon, 14 Mar 2011 19:51:47 -0700 (PDT)
Received: from mail-wy0-f172.google.com (mail-wy0-f172.google.com [74.125.82.172]) by core3.amsl.com (Postfix) with ESMTP id 1FA7C3A6AD4 for <sip-clf@ietf.org>; Mon, 14 Mar 2011 19:51:46 -0700 (PDT)
Received: by wyb42 with SMTP id 42so151254wyb.31 for <sip-clf@ietf.org>; Mon, 14 Mar 2011 19:53:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=0lC8phyNX9aAd0xrHu4dMoidcNj4wRMwhoTIAKN66xU=; b=J8UG1g9Otx74TqxkSpj8YJkQ+bv5wkXBqtOlYWb2K+MYYbqktPUx+MJuxwpvUGkN/a +jxRgwAcG8mPI330B0CG6HsxWC2Hp2kzqTMxi+8Ph4AIEhHNbQgzlOPr6G7xTDGdwDpH Zzxq0O2Q2sqh+lKkiHGevErw6Hcz8VtNwpJjw=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=lQf1pkyBwNAjR8UrrC6URttdz5jiNsXfqvxm1583m3hT7+zMqb9alM3rGLqCNGfmyT 8zq9WW8j858jVGHGRxWh56jrpG+9b6W6kXlJoJg6aH5LawbkgsqFSTDEVT/mwtX9I/ow YfBYrRKHJAy7dxI7sUQZImMtkEDrXA+GCYvOY=
MIME-Version: 1.0
Received: by 10.216.62.137 with SMTP id y9mr2951254wec.107.1300157590916; Mon, 14 Mar 2011 19:53:10 -0700 (PDT)
Received: by 10.216.25.17 with HTTP; Mon, 14 Mar 2011 19:53:10 -0700 (PDT)
Date: Mon, 14 Mar 2011 20:53:10 -0600
Message-ID: <AANLkTi=4NSXhgqAg75EUkWt6K0jdg4Kgcy6B37vyTMit@mail.gmail.com>
From: Anders Nygren <anders.nygren@gmail.com>
To: sip-clf@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Subject: [sip-clf] Vendor extensions in draft-ietf-sipclf-format-01.txt
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2011 02:51:48 -0000

Hi
I must say that I really dislike the proposed format for vendor specific fields.
Having a variable length "tag" before the length field means that it
is necessary
to scan the tag looking for the ',' just to find the length field.

There is no simple way to tell he difference between a sip-clf
optional field and
a vendor specific optional field. So it will always be necessary to scan the
record looking for the ',' .
Actually looking at RFC 5424 ch 4.3.2 it looks like this would be a legal
ID, "0001,FFFF,@12345" which would be difficult to differentiate from a
standard optional field without a lot of work.

I think a better way to do this would be similar to diameter RFC3588, ch 4.1.
Then we could have just one format for standard optional fields and vendor
specific fields

byte 1  0x09
byte 2-5 Tag (Hex)
byte 6-9 VendorId
byte 10 0x2C
byte 11-14 Length (Hex)
byte 15 0x2C
byte 16-.. Value (variable length)

Where VendorId is the IANA assigned "SMI Network Management Private
Enterprise Codes"  [ASSIGNNO] value.
VendorId=0 is used a for the standard optional fields defined in SIP-CLF.

/Anders