From wwwrun@rfc-editor.org Thu Feb 14 14:06:46 2013 Return-Path: X-Original-To: sip-clf@ietfa.amsl.com Delivered-To: sip-clf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED51321F844E; Thu, 14 Feb 2013 14:06:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.042 X-Spam-Level: X-Spam-Status: No, score=-102.042 tagged_above=-999 required=5 tests=[AWL=-0.042, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vrHEayoUO1W8; Thu, 14 Feb 2013 14:06:46 -0800 (PST) Received: from rfc-editor.org (unknown [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 7036021F8ABD; Thu, 14 Feb 2013 14:06:46 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 236CDB1E002; Thu, 14 Feb 2013 14:06:17 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130214220617.236CDB1E002@rfc-editor.org> Date: Thu, 14 Feb 2013 14:06:17 -0800 (PST) Cc: sip-clf@ietf.org, rfc-editor@rfc-editor.org Subject: [sip-clf] RFC 6872 on The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model X-BeenThere: sip-clf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SIP Common Log File format discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2013 22:06:47 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6872 Title: The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model Author: V. Gurbani, Ed., E. Burger, Ed., T. Anjali, H. Abdelnur, O. Festor Status: Standards Track Stream: IETF Date: February 2013 Mailbox: vkg@bell-labs.com, eburger@standardstrack.com, tricha@ece.iit.edu, humbol@gmail.com, Olivier.Festor@loria.fr Pages: 39 Characters: 72134 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-sipclf-problem-statement-13.txt URL: http://www.rfc-editor.org/rfc/rfc6872.txt Well-known web servers such as Apache and web proxies like Squid support event logging using a common log format. The logs produced using these de facto standard formats are invaluable to system administrators for troubleshooting a server and tool writers to craft tools that mine the log files and produce reports and trends. Furthermore, these log files can also be used to train anomaly detection systems and feed events into a security event management system. The Session Initiation Protocol (SIP) does not have a common log format, and, as a result, each server supports a distinct log format that makes it unnecessarily complex to produce tools to do trend analysis and security detection. This document describes a framework, including requirements and analysis of existing approaches, and specifies an information model for development of a SIP common log file format that can be used uniformly by user agents, proxies, registrars, and redirect servers as well as back-to-back user agents. This document is a product of the SIP Common Log Format Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet standards track protocol for the Internet community,and requests discussion and suggestions for improvements. Please refer to the current edition of the Internet Official Protocol Standards (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Thu Feb 14 14:07:00 2013 Return-Path: X-Original-To: sip-clf@ietfa.amsl.com Delivered-To: sip-clf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 327B921F845A; Thu, 14 Feb 2013 14:07:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.041 X-Spam-Level: X-Spam-Status: No, score=-102.041 tagged_above=-999 required=5 tests=[AWL=-0.041, BAYES_00=-2.599, J_CHICKENPOX_93=0.6, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UCWmpcMFkB99; Thu, 14 Feb 2013 14:06:59 -0800 (PST) Received: from rfc-editor.org (unknown [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id BD04F21F8910; Thu, 14 Feb 2013 14:06:59 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 977C7B1E00D; Thu, 14 Feb 2013 14:06:30 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130214220630.977C7B1E00D@rfc-editor.org> Date: Thu, 14 Feb 2013 14:06:30 -0800 (PST) Cc: sip-clf@ietf.org, rfc-editor@rfc-editor.org Subject: [sip-clf] RFC 6873 on Format for the Session Initiation Protocol (SIP) Common Log Format (CLF) X-BeenThere: sip-clf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SIP Common Log File format discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2013 22:07:00 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6873 Title: Format for the Session Initiation Protocol (SIP) Common Log Format (CLF) Author: G. Salgueiro, V. Gurbani, A. B. Roach Status: Standards Track Stream: IETF Date: February 2013 Mailbox: gsalguei@cisco.com, vkg@bell-labs.com, adam@nostrum.com Pages: 28 Characters: 63449 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-sipclf-format-11.txt URL: http://www.rfc-editor.org/rfc/rfc6873.txt The SIPCLF working group has defined a Common Log Format (CLF) framework for Session Initiation Protocol (SIP) servers. This CLF mimics the successful event logging format found in well-known web servers like Apache and web proxies like Squid. This document proposes an indexed text encoding format for the SIP CLF that retains the key advantages of a text-based format while significantly increasing processing performance over a purely text-based implementation. This file format adheres to the SIP CLF information model and provides an effective encoding scheme for all mandatory and optional fields that appear in a SIP CLF record. This document is a product of the SIP Common Log Format Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet standards track protocol for the Internet community,and requests discussion and suggestions for improvements. Please refer to the current edition of the Internet Official Protocol Standards (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From musgravepj@gmail.com Thu Feb 14 14:24:45 2013 Return-Path: X-Original-To: sip-clf@ietfa.amsl.com Delivered-To: sip-clf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6572321F84BB for ; Thu, 14 Feb 2013 14:24:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.143 X-Spam-Level: X-Spam-Status: No, score=-0.143 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_PBL=0.905, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZBlUCMTZLEm for ; Thu, 14 Feb 2013 14:24:44 -0800 (PST) Received: from mail-ie0-x22e.google.com (ie-in-x022e.1e100.net [IPv6:2607:f8b0:4001:c03::22e]) by ietfa.amsl.com (Postfix) with ESMTP id 5D9DD21F844F for ; Thu, 14 Feb 2013 14:24:44 -0800 (PST) Received: by mail-ie0-f174.google.com with SMTP id k10so3948930iea.19 for ; Thu, 14 Feb 2013 14:24:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:from:content-type:content-transfer-encoding:subject :message-id:date:to:mime-version:x-mailer; bh=WvaNV7RN0w+lhRyAqwbu37uXkktXM08HXn4QJ7ZU4X8=; b=ViVyUm4HzJ8Eet0Lh1AANcV3tSjEk8/5CX3p6Ehd0kuw5KiMZjqFIRDj7sJ5zLeFGj fUtNSEsoACFE/EvcR88jZzrEk2boiALTOZUpccuxKeqNV/JdSzrO0RSB9Km8/AJdFTGZ mWMCWH2Sd47Adk0+Ddxy9FnqNU87/V/gthut4FcQFZ1lr2Km56hXWaS+qbP8V2NpoEjn AvDVRtqWhvR/4XGIl4fenDnhsCQqyn28MywVIiqr/Hsc6KJOZWJVnzvp8oqf1Aeblgzg iq4ytjFOYulhmay7AZz1R9F6BhhptbaPT8G4aKbfUqWI5b7AbcipDJVVxQR9WkS42DRR SfJg== X-Received: by 10.50.194.134 with SMTP id hw6mr265402igc.20.1360880683726; Thu, 14 Feb 2013 14:24:43 -0800 (PST) Received: from [192.168.1.105] ([204.237.33.112]) by mx.google.com with ESMTPS id wo8sm1471034igb.6.2013.02.14.14.24.42 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 14 Feb 2013 14:24:43 -0800 (PST) From: Peter Musgrave Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <5F16C48D-8A36-45A8-B5C4-62F8712C7F01@gmail.com> Date: Thu, 14 Feb 2013 17:24:40 -0500 To: "sip-clf@ietf.org Mailing" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: [sip-clf] RFC6872/RFC6873 WooHoo! X-BeenThere: sip-clf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SIP Common Log File format discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2013 22:24:45 -0000 Congrats to the authors of these documents for getting all the way to = done! Thanks also to Robert Sparks for steering these through some obstacles = and his counsel. It has been an interesting experience chairing this WG = and gaining some perspective on the IETF process. My thanks to Robert = for giving me this opportunity to learn some lessons about cat herding = ;-) This concludes the charter of the sip-clf working group and the group = will now wind down.=20 Regards,=20 Peter Musgrave (soon to be retired chair of sip-clf)= From gsalguei@cisco.com Thu Feb 14 14:38:47 2013 Return-Path: X-Original-To: sip-clf@ietfa.amsl.com Delivered-To: sip-clf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09D9821F86DD for ; Thu, 14 Feb 2013 14:38:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.499 X-Spam-Level: X-Spam-Status: No, score=-10.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id coNDntpe7YuT for ; Thu, 14 Feb 2013 14:38:46 -0800 (PST) Received: from av-tac-rtp.cisco.com (av-tac-rtp.cisco.com [64.102.19.209]) by ietfa.amsl.com (Postfix) with ESMTP id 3F15721F85C4 for ; Thu, 14 Feb 2013 14:38:46 -0800 (PST) X-TACSUNS: Virus Scanned Received: from chook.cisco.com (localhost.cisco.com [127.0.0.1]) by av-tac-rtp.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id r1EMcjre020526 for ; Thu, 14 Feb 2013 17:38:45 -0500 (EST) Received: from rtp-gsalguei-8917.cisco.com (rtp-gsalguei-8917.cisco.com [10.116.132.56]) by chook.cisco.com (8.13.8+Sun/8.13.8) with ESMTP id r1EMcj5v028079; Thu, 14 Feb 2013 17:38:45 -0500 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Gonzalo Salgueiro In-Reply-To: <5F16C48D-8A36-45A8-B5C4-62F8712C7F01@gmail.com> Date: Thu, 14 Feb 2013 17:38:45 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5F16C48D-8A36-45A8-B5C4-62F8712C7F01@gmail.com> To: Peter Musgrave X-Mailer: Apple Mail (2.1499) Cc: "sip-clf@ietf.org Mailing" Subject: Re: [sip-clf] RFC6872/RFC6873 WooHoo! X-BeenThere: sip-clf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SIP Common Log File format discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2013 22:38:47 -0000 Thanks, Peter. Thanks to you as well for all your efforts. Best, Gonzalo On Feb 14, 2013, at 5:24 PM, Peter Musgrave = wrote: > Congrats to the authors of these documents for getting all the way to = done! >=20 > Thanks also to Robert Sparks for steering these through some obstacles = and his counsel. It has been an interesting experience chairing this WG = and gaining some perspective on the IETF process. My thanks to Robert = for giving me this opportunity to learn some lessons about cat herding = ;-) >=20 > This concludes the charter of the sip-clf working group and the group = will now wind down.=20 >=20 > Regards,=20 >=20 > Peter Musgrave > (soon to be retired chair of sip-clf) > _______________________________________________ > sip-clf mailing list > sip-clf@ietf.org > https://www.ietf.org/mailman/listinfo/sip-clf >=20 From iesg-secretary@ietf.org Tue Feb 19 11:03:59 2013 Return-Path: X-Original-To: sip-clf@ietfa.amsl.com Delivered-To: sip-clf@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B45E21F8AF8; Tue, 19 Feb 2013 11:03:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.537 X-Spam-Level: X-Spam-Status: No, score=-102.537 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QTXgsNAjQXbi; Tue, 19 Feb 2013 11:03:58 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97B9B21F87BB; Tue, 19 Feb 2013 11:03:58 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: IESG Secretary To: IETF Announcement List X-Test-IDTracker: no X-IETF-IDTracker: 4.40 Message-ID: <20130219190358.3772.9109.idtracker@ietfa.amsl.com> Date: Tue, 19 Feb 2013 11:03:58 -0800 Cc: sip-clf@ietf.org Subject: [sip-clf] WG Action: Conclusion of SIP Common Log Format (sipclf) X-BeenThere: sip-clf@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: SIP Common Log File format discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Feb 2013 19:03:59 -0000 The SIP Common Log Format (sipclf) working group in the Real-Time = Applications and Infrastructure Area has concluded. The IESG contact person= s = are Robert Sparks and Gonzalo Camarillo. The mailing list will remain open.