Re: [sip-clf] draft-ietf-sipclf-format-00 comments

Gonzalo Salgueiro <> Fri, 11 March 2011 19:37 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 3EDFB3A6867 for <>; Fri, 11 Mar 2011 11:37:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -10.411
X-Spam-Status: No, score=-10.411 tagged_above=-999 required=5 tests=[AWL=0.188, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id lYfHTJkS1ZD2 for <>; Fri, 11 Mar 2011 11:37:36 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id 0F4D93A6806 for <>; Fri, 11 Mar 2011 11:37:35 -0800 (PST)
X-TACSUNS: Virus Scanned
Received: from ( []) by (8.13.8+Sun/8.13.8) with ESMTP id p2BJcspj021447; Fri, 11 Mar 2011 14:38:54 -0500 (EST)
Received: from ( []) by (8.13.8+Sun/8.13.8) with ESMTP id p2BJcr3g008375; Fri, 11 Mar 2011 14:38:54 -0500 (EST)
Mime-Version: 1.0 (Apple Message framework v1082)
Content-Type: text/plain; charset=us-ascii
From: Gonzalo Salgueiro <>
In-Reply-To: <>
Date: Fri, 11 Mar 2011 14:38:53 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <>
References: <>
To: Anders Nygren <>
X-Mailer: Apple Mail (2.1082)
Subject: Re: [sip-clf] draft-ietf-sipclf-format-00 comments
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Fri, 11 Mar 2011 19:37:37 -0000

Anders - 

Thanks for providing your feedback, it is much appreciated as we work through developing this format.  

I'm very glad to hear you are implementing this already and would be willing to follow up with you offline to get some data points on how you decided to do this, how difficult it was, and how useful you found it, what you would change, etc.

Comments inline...
On Mar 11, 2011, at 1:01 PM, Anders Nygren wrote:

> Hi
> I am not sure what is the correct way for commenting on the SIP-CLF spec,
> so I will do it here until someone tells me that there is a better
> place to do it.
[GS] This is indeed the place.

> I am trying to implement a log reader and writer according to
> draft-ietf-sipclf-format-00 and have found a few small errors.
> page 8:
>   "Record Length (6 bytes):  Hexadecimal encoded total length of this
>    log record, including "Flags" and "Record Length" fields, and
>    terminating line-feed."
> Should that include the version field as well?

[GS] Yes this does include the Version field. It is the length of the ENTIRE record including all of <IndexPointers>, <MandatoryFields>, <OptionalFields>
The list of items in the text you have selected is not meant to be  complete listing of all fields, rather a representative list indicating that everything is included. If you think there is value in specifically mentioning the Version field, then I will modify the text as follows:

Hexadecimal encoded total length of this log record, including "Version", "Record Length", "Flags" fields, and terminating line-feed.

> page 12:
>   "Length Field (2 bytes):  Indicates the length of the value coded in
>    this TLV, hexadecimal encoded.  This length does NOT include the
>    TLV header."
> The length field is shown as 4 bytes in figure 5.

Thanks. Great catch.  This is indeed wrong. The figure is correct. I will change the text to 4 bytes.

Warm Regards,

> /Anders Nygren
> _______________________________________________
> sip-clf mailing list