[sip-clf] WGLC:draft-ietf-sipclf-problem-statement-06.txt

Peter Musgrave <peter.musgrave@magorcorp.com> Mon, 18 April 2011 19:12 UTC

Return-Path: <peter.musgrave@magorcorp.com>
X-Original-To: sip-clf@ietfc.amsl.com
Delivered-To: sip-clf@ietfc.amsl.com
Received: from localhost (localhost []) by ietfc.amsl.com (Postfix) with ESMTP id 8C4A8E070C for <sip-clf@ietfc.amsl.com>; Mon, 18 Apr 2011 12:12:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.598
X-Spam-Status: No, score=-103.598 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_MOSTLY=0.001, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([]) by localhost (ietfc.amsl.com []) (amavisd-new, port 10024) with ESMTP id lhGDtmZPUzUy for <sip-clf@ietfc.amsl.com>; Mon, 18 Apr 2011 12:12:00 -0700 (PDT)
Received: from mail-gy0-f172.google.com (mail-gy0-f172.google.com []) by ietfc.amsl.com (Postfix) with ESMTP id 8473AE0694 for <sip-clf@ietf.org>; Mon, 18 Apr 2011 12:12:00 -0700 (PDT)
Received: by gyf3 with SMTP id 3so1920153gyf.31 for <sip-clf@ietf.org>; Mon, 18 Apr 2011 12:12:00 -0700 (PDT)
Received: by with SMTP id x3mr4965701ybh.333.1303153920145; Mon, 18 Apr 2011 12:12:00 -0700 (PDT)
Received: from petermac.magor.local ([]) by mx.google.com with ESMTPS id p23sm932026ybk.9.2011. (version=TLSv1/SSLv3 cipher=OTHER); Mon, 18 Apr 2011 12:11:59 -0700 (PDT)
From: Peter Musgrave <peter.musgrave@magorcorp.com>
Content-Type: multipart/alternative; boundary=Apple-Mail-15-576686546
Date: Mon, 18 Apr 2011 15:11:57 -0400
References: <20110418143004.807.72505.idtracker@ietfc.amsl.com>
To: "sip-clf@ietf.org Mailing" <sip-clf@ietf.org>
Message-Id: <A4BBEEE4-4420-4A3A-BD0D-EE72430A6A64@magorcorp.com>
Mime-Version: 1.0 (Apple Message framework v1084)
X-Mailer: Apple Mail (2.1084)
Subject: [sip-clf] WGLC:draft-ietf-sipclf-problem-statement-06.txt
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Apr 2011 19:12:01 -0000

Greetings CLF-ers,

I would like to start a two week WGLC on the problem statement doc (in accordance with our discussion in Prague). 

Please make you comments on the list by Wed. May 4th (I have added a few days to account for the Easter break). 

We need reviewers and fresh eyes - so if you can make time to read this it is much appreciated!


Peter Musgrave
Chair, sip-clf

Begin forwarded message:

> From: Internet-Drafts@ietf.org
> Date: April 18, 2011 10:30:04 AM EDT
> To: i-d-announce@ietf.org
> Cc: sip-clf@ietf.org
> Subject: [sip-clf] I-D Action:draft-ietf-sipclf-problem-statement-06.txt
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the SIP Common Log Format Working Group of the IETF.
> 	Title           : The Common Log Format (CLF) for the Session Initiation Protocol (SIP)
> 	Author(s)       : V. Gurbani, et al.
> 	Filename        : draft-ietf-sipclf-problem-statement-06.txt
> 	Pages           : 34
> 	Date            : 2011-04-18
> Well-known web servers such as Apache and web proxies like Squid
> support event logging using a common log format.  The logs produced
> using these de-facto standard formats are invaluable to system
> administrators for trouble-shooting a server and tool writers to
> craft tools that mine the log files and produce reports and trends.
> Furthermore, these log files can also be used to train anomaly
> detection systems and feed events into a security event management
> system.  The Session Initiation Protocol does not have a common log
> format, and as a result, each server supports a distinct log format
> that makes it unnecessarily complex to produce tools to do trend
> analysis and security detection.  We propose a common log file format
> for SIP servers that can be used uniformly by proxies, registrars,
> redirect servers as well as back-to-back user agents.
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-sipclf-problem-statement-06.txt
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> Below is the data which will enable a MIME compliant mail reader
> implementation to automatically retrieve the ASCII version of the
> Internet-Draft.
> _______________________________________________
> sip-clf mailing list
> sip-clf@ietf.org
> https://www.ietf.org/mailman/listinfo/sip-clf