Re: [sip-clf] Defining Pros and Cons of ASCII/IPFIX

Cullen Jennings <fluffy@cisco.com> Sun, 07 November 2010 22:52 UTC

Return-Path: <fluffy@cisco.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9846A28C11E for <sip-clf@core3.amsl.com>; Sun, 7 Nov 2010 14:52:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.266
X-Spam-Level:
X-Spam-Status: No, score=-110.266 tagged_above=-999 required=5 tests=[AWL=-0.267, BAYES_00=-2.599, J_CHICKENPOX_33=0.6, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oAgMOcXlSS+7 for <sip-clf@core3.amsl.com>; Sun, 7 Nov 2010 14:52:26 -0800 (PST)
Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 7A1FA28C0D7 for <sip-clf@ietf.org>; Sun, 7 Nov 2010 14:52:26 -0800 (PST)
Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AvsEAF+81kyrR7Ht/2dsb2JhbACiBXGeNppbAoVGBIRYgSqECUqDCg
X-IronPort-AV: E=Sophos;i="4.58,311,1286150400"; d="scan'208";a="282273008"
Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-5.cisco.com with ESMTP; 07 Nov 2010 22:52:46 +0000
Received: from [192.168.4.2] (rcdn-fluffy-8711.cisco.com [10.99.9.18]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id oA7MnhEt023912 for <sip-clf@ietf.org>; Sun, 7 Nov 2010 22:52:45 GMT
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Apple Message framework v1081)
From: Cullen Jennings <fluffy@cisco.com>
In-Reply-To: <AANLkTikQ-gV-tja_LnQx7X-4uScpnAi=oNVAj3xQe_2J@mail.gmail.com>
Date: Sun, 07 Nov 2010 15:53:04 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <DF0E148F-CA21-4373-92FF-A777A27A76EE@cisco.com>
References: <AANLkTin3+_+-ARa29=o4V8-Pp-TS0Xc5S04CYhy0sT=r@mail.gmail.com> <D2591488-77F2-423D-B2AE-187E627D4489@acmepacket.com> <752EDF9B02C09847950620E262C45431845234@PALLENE.office.hd> <AANLkTikQ-gV-tja_LnQx7X-4uScpnAi=oNVAj3xQe_2J@mail.gmail.com>
To: List SIP-CLF Mailing <sip-clf@ietf.org>
X-Mailer: Apple Mail (2.1081)
Subject: Re: [sip-clf] Defining Pros and Cons of ASCII/IPFIX
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Nov 2010 22:52:28 -0000

I'm sort of curios what do both means -  A proxy would write the logs twice in the two different formats? 

I suspect the pro/cons will show that these protocols are so close to the same that it would nuts to expend the energy do both. Perhaps  I will feel differently when I see the pro/cons. 

Here's the conversation I imagine having with the product marketing people that will decide if this gets prioritized high enough that we will actually implement it. Hey I need X people for Solution A and that will give customers the benefit of BLAH BLAH. Then I say, I also want on the Y people for Solution B and that will give customers the benefit of and repeat the same BLAH BLAH. At that point they will say, so if we did just one of these they would get all the benefit right? and I will say yes and that will be the end of it - they will either decide I am so stupid  to even propose this that they do neither or, if I am lucky,  they will pick one based on some complete misunderstanding. I'll get back we choose A because that solution better aligns with the RESTful architecture of cloud computing. 


On Oct 28, 2010, at 11:55 AM, Peter Musgrave wrote:

> Hi, 
> 
> How do people feel about including one/both as an issue in the pros/cons discussion and the effort to solicit wider input from implementors?
> 
> I think then if both gets continued support we can present that as input in Prague and see where it goes. 
> 
> If the pro/con idea has support then I can start the discussion with a summary of what's been said thus far...
> 
> Regards
> 
> Peter Musgrave
> (as co-chair)
> 
> On Thu, Oct 28, 2010 at 1:47 PM, Saverio Niccolini <Saverio.Niccolini@neclab.eu> wrote:
> I am also in favor of specifying both, from a commercial perspective
> this makes a lot of sense to give people in different markets what
> they need.
> 
> Saverio
> 
> ============================================================
> Dr. Saverio Niccolini
> Manager, Real-Time Communications Group
> NEC Laboratories Europe, Network Research Division     
> Kurfuerstenanlage 36, D-69115 Heidelberg
> Tel.     +49 (0)6221 4342-118
> NEC*NET Phone: 800-49-33-118
> Fax:     +49 (0)6221 4342-155
> e-mail:  saverio.niccolini@neclab.eu
> ============================================================
> NEC Europe Limited Registered Office: NEC House, 1 Victoria
> Road, London W3 6BL Registered in England 2832014
> 
>  
> 
> 
> > -----Original Message-----
> > From: sip-clf-bounces@ietf.org [mailto:sip-clf-bounces@ietf.org] On
> > Behalf Of Hadriel Kaplan
> > Sent: 27 October 2010 19:28
> > To: Peter Musgrave
> > Cc: List SIP-CLF Mailing
> > Subject: Re: [sip-clf] Defining Pros and Cons of ASCII/IPFIX
> >
> >
> > At a recent conference I asked a SIP monitoring vendor which format
> > they thought we should specify, and surprisingly they said "do both".
> > I asked them why, and they said there was a market for both ascii and
> > binary formats - that monitoring systems would prefer binary ones, but
> > that humans prefer ascii style ones; and that in the Enterprise market
> > ascii was more dominant, while in the SP market binary was more
> > dominant.  They said we wouldn't be able to choose just one in the IETF
> > - because whichever we picked there'd still be a market for the other
> > and that market would continue the status-quo of proprietary formats or
> > settle on some de-facto one.
> >
> > In thinking about this more I think I agree with them.  It'd be like us
> > picking a Registrar database access protocol as well as the fields in
> > it - we could specify SQL or DIAMETER, but in some markets it'll be one
> > not the other no matter which one we choose. (or it'll be Active
> > Directory, etc.)
> >
> > -hadriel
> >
> > On Oct 27, 2010, at 11:23 AM, Peter Musgrave wrote:
> >
> > > Hi all,
> > >
> > > As co-chair I am looking for a way to make a determination about how
> > to meet the groups decision to move forward with just one format in a
> > WG which has good support for two formats.
> > >
> > > In my (personal) opinion I think the objective is to develop
> > something that will be widely implemented. I would like to solicit
> > input from a larger audience - but first I think we need to frame the
> > pros and cons.
> > >
> > > I would like to suggest the following:
> > >
> > > 1) Use the list and the Beijing meeting to come to a consensus on the
> > pros and cons of each and the applications which may favour one format
> > vs another.
> > >
> > > 2) Place these pros/cons on the WG Wiki [I can act as editor]
> > >
> > > 3) Solicit input from SIP Implementors - referring them to the WG
> > WIki
> > > - use the Columbia sip-implementors, sipforum list and SIPT27
> > >
> > > 4) Review the feedback and try to come to a conclusion on the list
> > (or failing that, in Prague at IETF80)
> > >
> > > I will be at SIPIT27 - so I can raise awareness of this discussion in
> > that community.
> > >
> > > How do people feel about this approach?
> > >
> > > I welcome any other/additional ways to resolve this issue.
> > >
> > > Regards,
> > >
> > > Peter Musgrave
> > > co-chair
> > >
> > >
> > >
> > > <ATT00001..c>
> >
> > _______________________________________________
> > sip-clf mailing list
> > sip-clf@ietf.org
> > https://www.ietf.org/mailman/listinfo/sip-clf
> 
> _______________________________________________
> sip-clf mailing list
> sip-clf@ietf.org
> https://www.ietf.org/mailman/listinfo/sip-clf