Re: [sip-clf] Changes to proposed charter based on discussion in Stockholm

"Vijay K. Gurbani" <> Thu, 20 August 2009 22:08 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 2720B3A6F6B for <>; Thu, 20 Aug 2009 15:08:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.037
X-Spam-Status: No, score=-2.037 tagged_above=-999 required=5 tests=[AWL=-0.308, BAYES_00=-2.599, SARE_MLH_Stock1=0.87]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id SeFpdiZS-d+B for <>; Thu, 20 Aug 2009 15:08:34 -0700 (PDT)
Received: from ( []) by (Postfix) with ESMTP id 21AE43A6F55 for <>; Thu, 20 Aug 2009 15:08:33 -0700 (PDT)
Received: from ( []) by (8.13.8/IER-o) with ESMTP id n7KM8aMp010185 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 20 Aug 2009 17:08:37 -0500 (CDT)
Received: from [] ( []) by (8.13.8/TPES) with ESMTP id n7KM8ZVn005988; Thu, 20 Aug 2009 17:08:35 -0500 (CDT)
Message-ID: <>
Date: Thu, 20 Aug 2009 17:08:34 -0500
From: "Vijay K. Gurbani" <>
Organization: Bell Labs Security Technology Research Group
User-Agent: Thunderbird (Windows/20070728)
MIME-Version: 1.0
To: Robert Sparks <>
References: <>
In-Reply-To: <>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.57 on
Cc:, theo zourzouvillys <>
Subject: Re: [sip-clf] Changes to proposed charter based on discussion in Stockholm
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Thu, 20 Aug 2009 22:08:35 -0000

Robert Sparks wrote:
> Please review and comment on the text at

Robert: Overall, the writeup looks great.  I especially
think that the operational guidelines and security
guidance are advantageous outcomes of the hallway
conversation we had with various folks in Stockholm.

I do have one suggestion:

* the need to search, merge, and summarize the log records
   from diverse elements.

* the need to search, merge, and summarize the log records
   from a log file produced by the corresponding SIP element.

Rationale: I believe that what you are trying to say is
that search, merge, and summarization is being performed
by the administrator or user responsible for a specific
SIP element.  That is, a user may well summarize all the
sessions he or she established during the day, while a
system administrator will be more interested in a summary
of all the sessions set up through the proxy.  Each
principal -- user or the administrator -- is looking at
the log records produced by the specific SIP element they
have access to; respectively, UA and proxy.

Thanks for getting this out.

- vijay
Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60566 (USA)
Email: vkg@{,,}