
From internet-drafts@ietf.org  Thu Jan  3 09:52:36 2013
Return-Path: <internet-drafts@ietf.org>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C44C021F8C16; Thu,  3 Jan 2013 09:52:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100
X-Spam-Level: 
X-Spam-Status: No, score=-100 tagged_above=-999 required=5 tests=[USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zSxRIatDGzte; Thu,  3 Jan 2013 09:52:34 -0800 (PST)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FC3121F868B; Thu,  3 Jan 2013 09:52:34 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.37
Message-ID: <20130103175234.31449.27708.idtracker@ietfa.amsl.com>
Date: Thu, 03 Jan 2013 09:52:34 -0800
Cc: sip-clf@ietf.org
Subject: [sip-clf] I-D Action: draft-ietf-sipclf-problem-statement-13.txt
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Jan 2013 17:52:36 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the SIP Common Log Format Working Group of th=
e IETF.

	Title           : The Common Log Format (CLF) for the Session Initiation P=
rotocol (SIP): Framework and Information Model
	Author(s)       : Vijay K. Gurbani
                          Eric W. Burger
                          Tricha Anjali
                          Humberto Abdelnur
                          Olivier Festor
	Filename        : draft-ietf-sipclf-problem-statement-13.txt
	Pages           : 37
	Date            : 2013-01-03

Abstract:
   Well-known web servers such as Apache and web proxies like Squid
   support event logging using a common log format.  The logs produced
   using these de-facto standard formats are invaluable to system
   administrators for trouble-shooting a server and tool writers to
   craft tools that mine the log files and produce reports and trends.
   Furthermore, these log files can also be used to train anomaly
   detection systems and feed events into a security event management
   system.  The Session Initiation Protocol (SIP) does not have a common
   log format, and as a result, each server supports a distinct log
   format that makes it unnecessarily complex to produce tools to do
   trend analysis and security detection.  This document describes a
   framework, including requirements and analysis of existing
   approaches, and specifies an information model for development of a
   SIP common log file format that can be used uniformly by user agents,
   proxies, registrars, redirect servers as well as back-to-back user
   agents.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-sipclf-problem-statement

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-sipclf-problem-statement-13

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-sipclf-problem-statement-13


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From iesg-secretary@ietf.org  Wed Jan  9 12:48:44 2013
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5B5021F88A1; Wed,  9 Jan 2013 12:48:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.404
X-Spam-Level: 
X-Spam-Status: No, score=-102.404 tagged_above=-999 required=5 tests=[AWL=0.195, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 35BoH6UVhWKV; Wed,  9 Jan 2013 12:48:44 -0800 (PST)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3072221F8886; Wed,  9 Jan 2013 12:48:44 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.37
Message-ID: <20130109204844.3586.33262.idtracker@ietfa.amsl.com>
Date: Wed, 09 Jan 2013 12:48:44 -0800
Cc: sipclf chair <sipclf-chairs@tools.ietf.org>, sipclf mailing list <sip-clf@ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [sip-clf] Protocol Action: 'Format for the Session Initiation Protocol (SIP)	Common Log Format (CLF)' to Proposed Standard	(draft-ietf-sipclf-format-11.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Jan 2013 20:48:44 -0000

The IESG has approved the following document:
- 'Format for the Session Initiation Protocol (SIP) Common Log Format
   (CLF)'
  (draft-ietf-sipclf-format-11.txt) as Proposed Standard

This document is the product of the SIP Common Log Format Working Group.

The IESG contact persons are Robert Sparks and Gonzalo Camarillo.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-sipclf-format/




Technical Summary:

The Session Initiation Protocol does not have a common log format, and as a result, 
each server supports a distinct log format that makes it unnecessarily complex 
to produce tools to do trend analysis and security detection. This document describes 
a text based format based on the data model defined in the companion document 
draft-ietf-sipclf-problem-statement. This format uses an indexed text approach to 
facilitate rapid searching of the log contents while retaining the advantages of a 
generic text search and filtering tools.

Working Group Summary:

The discussion of indexed-ascii specifically did not result in any contentious issues 
in the WG discussion. More generally the choice of indexed ascii was more difficult 
for the WG and took place during the development of draft-ietf-sipclf-problem-statement.

Document Quality:

There were sample implementations of the indexed ascii format written by 
Peter Musgrave and placed on the sipclf Wiki page 
(<http://trac.tools.ietf.org/wg/sipclf/trac/wiki>). 
Vijay Gurbani reports that three other implementations are known.

Personnel:

Peter Musgrave is the document shepherd. Robert Sparks is the responsible AD. 

From iesg-secretary@ietf.org  Wed Jan  9 12:55:31 2013
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2A2A1F0CFB; Wed,  9 Jan 2013 12:55:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.413
X-Spam-Level: 
X-Spam-Status: No, score=-102.413 tagged_above=-999 required=5 tests=[AWL=0.186, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CdUYw3w2iUWw; Wed,  9 Jan 2013 12:55:30 -0800 (PST)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4359C1F0D04; Wed,  9 Jan 2013 12:55:30 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.37
Message-ID: <20130109205530.857.2570.idtracker@ietfa.amsl.com>
Date: Wed, 09 Jan 2013 12:55:30 -0800
Cc: sipclf chair <sipclf-chairs@tools.ietf.org>, sipclf mailing list <sip-clf@ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [sip-clf] Protocol Action: 'The Common Log Format (CLF) for the Session	Initiation Protocol (SIP): Framework and Information Model' to	Proposed Standard (draft-ietf-sipclf-problem-statement-13.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Jan 2013 20:55:31 -0000

The IESG has approved the following document:
- 'The Common Log Format (CLF) for the Session Initiation Protocol (SIP):
   Framework and Information Model'
  (draft-ietf-sipclf-problem-statement-13.txt) as Proposed Standard

This document is the product of the SIP Common Log Format Working Group.

The IESG contact persons are Robert Sparks and Gonzalo Camarillo.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-sipclf-problem-statement/




Technical Summary:

The Session Initiation Protocol does not have a common log
format, and as a result, each server supports a distinct log format
that makes it unnecessarily complex to produce tools to do trend
analysis and security detection.  This document provides motivation
for a common format and defines a framework and data model for such 
a log as well as a need to allow extensions.

Working Group Summary:

There were some issues with respect the choice of indexed-ascii versus binary 
representation. This stalled the WG progress for a number of meetings. 
There was significant discussion about whether to create this standalone format,
or build withing syslog or IPFix. The technical implications of working within IPFix
were explored and the data model documented here could be used with IPFix. 
The  working group decided to move ahead with the standalone format documented
in draft-ietf-sipclf-format, and this final product has good support in the WG.

A previous version of this document received IESG review. This review raised issues
about the scope of the document (it is more than a problem statement), and technical
concerns involving internationalization.

Document Quality:

There were sample implementations of the indexed ascii format written by 
Peter Musgrave and placed on the sipclf Wiki page 
(<http://trac.tools.ietf.org/wg/sipclf/trac/wiki>). 
Vijay Gurbani reports that three other implementations are known.


Personnel:

Peter Musgrave is the document shepherd. Robert Sparks in the responsible AD.




From musgravepj@gmail.com  Thu Jan 10 01:31:17 2013
Return-Path: <musgravepj@gmail.com>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E201621F8703 for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 01:31:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pPAVFthJax+O for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 01:31:17 -0800 (PST)
Received: from mail-ia0-f182.google.com (mail-ia0-f182.google.com [209.85.210.182]) by ietfa.amsl.com (Postfix) with ESMTP id 5D09421F861F for <sip-clf@ietf.org>; Thu, 10 Jan 2013 01:31:16 -0800 (PST)
Received: by mail-ia0-f182.google.com with SMTP id x2so315505iad.41 for <sip-clf@ietf.org>; Thu, 10 Jan 2013 01:31:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:from:content-type:subject:date:references:to:message-id :mime-version:x-mailer; bh=S+IOdtxVp9Rs4/UM4B8AquTz8tFfOFpnR/cYAvNg99E=; b=XGlzN+CFYTQSXfjfNFE9lmvy2CRP+hEHctTpUf/HwHNMGoCjK6SOZbC0L0sgmsqiOC HoKcNhCGXxvtI+MxeKcy6Ct/3Z/le0nvbnS71ZUbtVngcLslfO+4p6skV+xVUTHo2SNd /u2p7H/91ere9z7Cur6h03QyX91AZcpsul+oqh38PrIchhfbRQKCPcvVe6Q57KLt76wU /YOn2iAakUS93QJTf1LCv1e4jY0KyHoF8l/NHA1+PXjusLWqrZDkGxxEB4Wiv2d5/DA+ wZU4au20uyjpknbW9x7xal6FRP3IQYDHcV9ZWz6/rzpbDTQB++Ov3fiynCSRCdmlc5W2 fTeQ==
X-Received: by 10.50.152.132 with SMTP id uy4mr4954692igb.3.1357810275621; Thu, 10 Jan 2013 01:31:15 -0800 (PST)
Received: from [192.168.1.105] ([204.237.33.112]) by mx.google.com with ESMTPS id qn10sm4739310igc.15.2013.01.10.01.31.14 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 10 Jan 2013 01:31:14 -0800 (PST)
From: Peter Musgrave <musgravepj@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_838EE610-EA66-4FC6-9A02-6A946780C895"
Date: Thu, 10 Jan 2013 04:31:26 -0500
References: <20130109204844.3586.33262.idtracker@ietfa.amsl.com>
To: "sip-clf@ietf.org Mailing" <sip-clf@ietf.org>
Message-Id: <8653B1F6-58D3-478F-AABA-5A6F3C222722@gmail.com>
Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\))
X-Mailer: Apple Mail (2.1499)
Subject: [sip-clf] Fwd: Protocol Action: 'Format for the Session Initiation Protocol (SIP)	Common Log Format (CLF)' to Proposed Standard (draft-ietf-sipclf-format-11.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jan 2013 09:31:18 -0000

--Apple-Mail=_838EE610-EA66-4FC6-9A02-6A946780C895
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Woohoo! (There is an announce for the problem statement as well)

Big thanks to Vijay Gurbani, Gonzola Salguiro and our AD Robert Sparks =
for getting these across the finish line!

Peter Musgrave


Begin forwarded message:

> From: The IESG <iesg-secretary@ietf.org>
> Subject: [sip-clf] Protocol Action: 'Format for the Session Initiation =
Protocol (SIP)	Common Log Format (CLF)' to Proposed Standard	=
(draft-ietf-sipclf-format-11.txt)
> Date: 9 January, 2013 3:48:44 PM EST
> To: IETF-Announce <ietf-announce@ietf.org>
> Cc: sipclf chair <sipclf-chairs@tools.ietf.org>, sipclf mailing list =
<sip-clf@ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
>=20
> The IESG has approved the following document:
> - 'Format for the Session Initiation Protocol (SIP) Common Log Format
>   (CLF)'
>  (draft-ietf-sipclf-format-11.txt) as Proposed Standard
>=20
> This document is the product of the SIP Common Log Format Working =
Group.
>=20
> The IESG contact persons are Robert Sparks and Gonzalo Camarillo.
>=20
> A URL of this Internet Draft is:
> http://datatracker.ietf.org/doc/draft-ietf-sipclf-format/
>=20
>=20
>=20
>=20
> Technical Summary:
>=20
> The Session Initiation Protocol does not have a common log format, and =
as a result,=20
> each server supports a distinct log format that makes it unnecessarily =
complex=20
> to produce tools to do trend analysis and security detection. This =
document describes=20
> a text based format based on the data model defined in the companion =
document=20
> draft-ietf-sipclf-problem-statement. This format uses an indexed text =
approach to=20
> facilitate rapid searching of the log contents while retaining the =
advantages of a=20
> generic text search and filtering tools.
>=20
> Working Group Summary:
>=20
> The discussion of indexed-ascii specifically did not result in any =
contentious issues=20
> in the WG discussion. More generally the choice of indexed ascii was =
more difficult=20
> for the WG and took place during the development of =
draft-ietf-sipclf-problem-statement.
>=20
> Document Quality:
>=20
> There were sample implementations of the indexed ascii format written =
by=20
> Peter Musgrave and placed on the sipclf Wiki page=20
> (<http://trac.tools.ietf.org/wg/sipclf/trac/wiki>).=20
> Vijay Gurbani reports that three other implementations are known.
>=20
> Personnel:
>=20
> Peter Musgrave is the document shepherd. Robert Sparks is the =
responsible AD.=20
> _______________________________________________
> sip-clf mailing list
> sip-clf@ietf.org
> https://www.ietf.org/mailman/listinfo/sip-clf


--Apple-Mail=_838EE610-EA66-4FC6-9A02-6A946780C895
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
">Woohoo! (There is an announce for the problem statement as =
well)<div><br></div><div>Big thanks to Vijay Gurbani, Gonzola Salguiro =
and our AD Robert Sparks for getting these across the finish =
line!</div><div><br></div><div>Peter =
Musgrave</div><div><br><div><br><div>Begin forwarded message:</div><br =
class=3D"Apple-interchange-newline"><blockquote type=3D"cite"><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;"><span style=3D"font-family:'Helvetica'; =
font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>From: </b></span><span =
style=3D"font-family:'Helvetica'; font-size:medium;">The IESG &lt;<a =
href=3D"mailto:iesg-secretary@ietf.org">iesg-secretary@ietf.org</a>&gt;<br=
></span></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>Subject: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;"><b>[sip-clf] Protocol Action: 'Format for the Session =
Initiation Protocol (SIP)	Common Log Format (CLF)' to Proposed =
Standard	=
(draft-ietf-sipclf-format-11.txt)</b><br></span></div><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;"><span style=3D"font-family:'Helvetica'; =
font-size:medium; color:rgba(0, 0, 0, 1.0);"><b>Date: </b></span><span =
style=3D"font-family:'Helvetica'; font-size:medium;">9 January, 2013 =
3:48:44 PM EST<br></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>To: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;">IETF-Announce &lt;<a =
href=3D"mailto:ietf-announce@ietf.org">ietf-announce@ietf.org</a>&gt;<br><=
/span></div><div style=3D"margin-top: 0px; margin-right: 0px; =
margin-bottom: 0px; margin-left: 0px;"><span =
style=3D"font-family:'Helvetica'; font-size:medium; color:rgba(0, 0, 0, =
1.0);"><b>Cc: </b></span><span style=3D"font-family:'Helvetica'; =
font-size:medium;">sipclf chair &lt;<a =
href=3D"mailto:sipclf-chairs@tools.ietf.org">sipclf-chairs@tools.ietf.org<=
/a>&gt;, sipclf mailing list &lt;<a =
href=3D"mailto:sip-clf@ietf.org">sip-clf@ietf.org</a>&gt;, RFC Editor =
&lt;<a =
href=3D"mailto:rfc-editor@rfc-editor.org">rfc-editor@rfc-editor.org</a>&gt=
;<br></span></div><br><div>The IESG has approved the following =
document:<br>- 'Format for the Session Initiation Protocol (SIP) Common =
Log Format<br> &nbsp;&nbsp;(CLF)'<br> =
&nbsp;(draft-ietf-sipclf-format-11.txt) as Proposed Standard<br><br>This =
document is the product of the SIP Common Log Format Working =
Group.<br><br>The IESG contact persons are Robert Sparks and Gonzalo =
Camarillo.<br><br>A URL of this Internet Draft is:<br><a =
href=3D"http://datatracker.ietf.org/doc/draft-ietf-sipclf-format/">http://=
datatracker.ietf.org/doc/draft-ietf-sipclf-format/</a><br><br><br><br><br>=
Technical Summary:<br><br>The Session Initiation Protocol does not have =
a common log format, and as a result, <br>each server supports a =
distinct log format that makes it unnecessarily complex <br>to produce =
tools to do trend analysis and security detection. This document =
describes <br>a text based format based on the data model defined in the =
companion document <br>draft-ietf-sipclf-problem-statement. This format =
uses an indexed text approach to <br>facilitate rapid searching of the =
log contents while retaining the advantages of a <br>generic text search =
and filtering tools.<br><br>Working Group Summary:<br><br>The discussion =
of indexed-ascii specifically did not result in any contentious issues =
<br>in the WG discussion. More generally the choice of indexed ascii was =
more difficult <br>for the WG and took place during the development of =
draft-ietf-sipclf-problem-statement.<br><br>Document =
Quality:<br><br>There were sample implementations of the indexed ascii =
format written by <br>Peter Musgrave and placed on the sipclf Wiki page =
<br>(&lt;http://trac.tools.ietf.org/wg/sipclf/trac/wiki&gt;). <br>Vijay =
Gurbani reports that three other implementations are =
known.<br><br>Personnel:<br><br>Peter Musgrave is the document shepherd. =
Robert Sparks is the responsible AD. =
<br>_______________________________________________<br>sip-clf mailing =
list<br>sip-clf@ietf.org<br>https://www.ietf.org/mailman/listinfo/sip-clf<=
br></div></blockquote></div><br></div></body></html>=

--Apple-Mail=_838EE610-EA66-4FC6-9A02-6A946780C895--

From vkg@bell-labs.com  Thu Jan 10 06:33:05 2013
Return-Path: <vkg@bell-labs.com>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28D2B21F8869 for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 06:33:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -107.499
X-Spam-Level: 
X-Spam-Status: No, score=-107.499 tagged_above=-999 required=5 tests=[AWL=-0.900, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nzBY9I9f7drs for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 06:33:04 -0800 (PST)
Received: from ihemail3.lucent.com (ihemail3.lucent.com [135.245.0.37]) by ietfa.amsl.com (Postfix) with ESMTP id 2C6EA21F8864 for <sip-clf@ietf.org>; Thu, 10 Jan 2013 06:33:04 -0800 (PST)
Received: from usnavsmail3.ndc.alcatel-lucent.com (usnavsmail3.ndc.alcatel-lucent.com [135.3.39.11]) by ihemail3.lucent.com (8.13.8/IER-o) with ESMTP id r0AEX345012243 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <sip-clf@ietf.org>; Thu, 10 Jan 2013 08:33:03 -0600 (CST)
Received: from umail.lucent.com (umail-ce2.ndc.lucent.com [135.3.40.63]) by usnavsmail3.ndc.alcatel-lucent.com (8.14.3/8.14.3/GMO) with ESMTP id r0AEX26k013726 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <sip-clf@ietf.org>; Thu, 10 Jan 2013 08:33:03 -0600
Received: from shoonya.ih.lucent.com (shoonya.ih.lucent.com [135.185.237.229]) by umail.lucent.com (8.13.8/TPES) with ESMTP id r0AEX2fj019698 for <sip-clf@ietf.org>; Thu, 10 Jan 2013 08:33:02 -0600 (CST)
Message-ID: <50EED196.4060604@bell-labs.com>
Date: Thu, 10 Jan 2013 08:35:02 -0600
From: "Vijay K. Gurbani" <vkg@bell-labs.com>
Organization: Bell Laboratories, Alcatel-Lucent
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: sip-clf@ietf.org
References: <20130109204844.3586.33262.idtracker@ietfa.amsl.com> <8653B1F6-58D3-478F-AABA-5A6F3C222722@gmail.com>
In-Reply-To: <8653B1F6-58D3-478F-AABA-5A6F3C222722@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.57 on 135.245.2.37
X-Scanned-By: MIMEDefang 2.64 on 135.3.39.11
Subject: Re: [sip-clf] Fwd: Protocol Action: 'Format for the Session Initiation Protocol (SIP)	Common Log Format (CLF)' to Proposed Standard (draft-ietf-sipclf-format-11.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jan 2013 14:33:05 -0000

On 01/10/2013 03:31 AM, Peter Musgrave wrote:
> Woohoo! (There is an announce for the problem statement as well)
>
> Big thanks to Vijay Gurbani, Gonzola Salguiro and our AD Robert Sparks
> for getting these across the finish line!

Thanks, Peter.  I will also like to thank Adam, Theo, Dale, Paul, 
Henning, Spencer and many others in the WG that provided valuable
feedback on these drafts as they progressed.

Thank you as well for the prototype implementations and other
associated chair duties to move these drafts along.

Ciao,

- vijay
-- 
Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60563 (USA)
Email: vkg@{bell-labs.com,acm.org} / vijay.gurbani@alcatel-lucent.com
Web:   http://ect.bell-labs.com/who/vkg/

From gsalguei@cisco.com  Thu Jan 10 08:00:31 2013
Return-Path: <gsalguei@cisco.com>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1EC921F8945 for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 08:00:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level: 
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jzTA7B026cQ7 for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 08:00:30 -0800 (PST)
Received: from av-tac-rtp.cisco.com (av-tac-rtp.cisco.com [64.102.19.209]) by ietfa.amsl.com (Postfix) with ESMTP id 8B7F321F893E for <sip-clf@ietf.org>; Thu, 10 Jan 2013 08:00:30 -0800 (PST)
X-TACSUNS: Virus Scanned
Received: from chook.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-rtp.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id r0AG0Ttu015091 for <sip-clf@ietf.org>; Thu, 10 Jan 2013 11:00:29 -0500 (EST)
Received: from rtp-gsalguei-8915.cisco.com (rtp-gsalguei-8915.cisco.com [10.116.132.54]) by chook.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id r0AG0SS3020753; Thu, 10 Jan 2013 11:00:28 -0500 (EST)
Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: text/plain; charset=us-ascii
From: Gonzalo Salgueiro <gsalguei@cisco.com>
In-Reply-To: <50EED196.4060604@bell-labs.com>
Date: Thu, 10 Jan 2013 11:00:27 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <62C6C1CB-00A8-46F6-8A48-70E55946C922@cisco.com>
References: <20130109204844.3586.33262.idtracker@ietfa.amsl.com> <8653B1F6-58D3-478F-AABA-5A6F3C222722@gmail.com> <50EED196.4060604@bell-labs.com>
To: "Vijay K. Gurbani" <vkg@bell-labs.com>
X-Mailer: Apple Mail (2.1283)
Cc: "sip-clf@ietf.org Mailing" <sip-clf@ietf.org>
Subject: Re: [sip-clf] Protocol Action: 'Format for the Session Initiation Protocol (SIP)	Common Log Format (CLF)' to Proposed Standard (draft-ietf-sipclf-format-11.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jan 2013 16:00:31 -0000

On Jan 10, 2013, at 9:35 AM, Vijay K. Gurbani wrote:

> On 01/10/2013 03:31 AM, Peter Musgrave wrote:
>> Woohoo! (There is an announce for the problem statement as well)

Hurray indeed! =20
>>=20
>> Big thanks to Vijay Gurbani, Gonzola Salguiro and our AD Robert =
Sparks
>> for getting these across the finish line!
>=20
> Thanks, Peter.  I will also like to thank Adam, Theo, Dale, Paul, =
Henning, Spencer and many others in the WG that provided valuable
> feedback on these drafts as they progressed.

Absolutely. Big thanks to Adam for his original indexed ascii =
manuscript, The guidance from Chris Lonvick and the feedback from =
Hadriel, Joe, Paul, etc. was invaluable. Thanks to all.


> Thank you as well for the prototype implementations and other
> associated chair duties to move these drafts along.

It isn't lost on me/us how much work Peter and Robert (as chair and AD) =
put into getting these progressed to publication.  Sincere thanks.

Cheers,

Gonzalo

> Ciao,
>=20
> - vijay
> --=20
> Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
> 1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60563 (USA)
> Email: vkg@{bell-labs.com,acm.org} / vijay.gurbani@alcatel-lucent.com
> Web:   http://ect.bell-labs.com/who/vkg/
> _______________________________________________
> sip-clf mailing list
> sip-clf@ietf.org
> https://www.ietf.org/mailman/listinfo/sip-clf
>=20


From eburger@standardstrack.com  Thu Jan 10 11:26:06 2013
Return-Path: <eburger@standardstrack.com>
X-Original-To: sip-clf@ietfa.amsl.com
Delivered-To: sip-clf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 028A121F8A8B for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 11:26:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level: 
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DRw0YcipidKP for <sip-clf@ietfa.amsl.com>; Thu, 10 Jan 2013 11:26:05 -0800 (PST)
Received: from biz104.inmotionhosting.com (biz104.inmotionhosting.com [74.124.215.15]) by ietfa.amsl.com (Postfix) with ESMTP id 4032321F8A7E for <sip-clf@ietf.org>; Thu, 10 Jan 2013 11:26:05 -0800 (PST)
Received: from [12.21.1.3] (port=51512 helo=[172.20.44.29]) by biz104.inmotionhosting.com with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80) (envelope-from <eburger@standardstrack.com>) id 1TtNlG-0000sq-LJ for sip-clf@ietf.org; Thu, 10 Jan 2013 11:25:58 -0800
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\))
From: Eric Burger <eburger@standardstrack.com>
In-Reply-To: <62C6C1CB-00A8-46F6-8A48-70E55946C922@cisco.com>
Date: Thu, 10 Jan 2013 14:26:07 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <D87200D7-1D9E-4C1E-8DE9-1219BF15655A@standardstrack.com>
References: <20130109204844.3586.33262.idtracker@ietfa.amsl.com> <8653B1F6-58D3-478F-AABA-5A6F3C222722@gmail.com> <50EED196.4060604@bell-labs.com> <62C6C1CB-00A8-46F6-8A48-70E55946C922@cisco.com>
To: "sip-clf@ietf.org Mailing" <sip-clf@ietf.org>
X-Mailer: Apple Mail (2.1499)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - biz104.inmotionhosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - standardstrack.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Subject: Re: [sip-clf] Protocol Action: 'Format for the Session Initiation Protocol (SIP)	Common Log Format (CLF)' to Proposed Standard (draft-ietf-sipclf-format-11.txt)
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Jan 2013 19:26:06 -0000

Are we done yet? :-)

Great work, everyone!

On Jan 10, 2013, at 11:00 AM, Gonzalo Salgueiro <gsalguei@cisco.com> =
wrote:

>=20
> On Jan 10, 2013, at 9:35 AM, Vijay K. Gurbani wrote:
>=20
>> On 01/10/2013 03:31 AM, Peter Musgrave wrote:
>>> Woohoo! (There is an announce for the problem statement as well)
>=20
> Hurray indeed! =20
>>>=20
>>> Big thanks to Vijay Gurbani, Gonzola Salguiro and our AD Robert =
Sparks
>>> for getting these across the finish line!
>>=20
>> Thanks, Peter.  I will also like to thank Adam, Theo, Dale, Paul, =
Henning, Spencer and many others in the WG that provided valuable
>> feedback on these drafts as they progressed.
>=20
> Absolutely. Big thanks to Adam for his original indexed ascii =
manuscript, The guidance from Chris Lonvick and the feedback from =
Hadriel, Joe, Paul, etc. was invaluable. Thanks to all.
>=20
>=20
>> Thank you as well for the prototype implementations and other
>> associated chair duties to move these drafts along.
>=20
> It isn't lost on me/us how much work Peter and Robert (as chair and =
AD) put into getting these progressed to publication.  Sincere thanks.
>=20
> Cheers,
>=20
> Gonzalo
>=20
>> Ciao,
>>=20
>> - vijay
>> --=20
>> Vijay K. Gurbani, Bell Laboratories, Alcatel-Lucent
>> 1960 Lucent Lane, Rm. 9C-533, Naperville, Illinois 60563 (USA)
>> Email: vkg@{bell-labs.com,acm.org} / vijay.gurbani@alcatel-lucent.com
>> Web:   http://ect.bell-labs.com/who/vkg/
>> _______________________________________________
>> sip-clf mailing list
>> sip-clf@ietf.org
>> https://www.ietf.org/mailman/listinfo/sip-clf
>>=20
>=20
> _______________________________________________
> sip-clf mailing list
> sip-clf@ietf.org
> https://www.ietf.org/mailman/listinfo/sip-clf

