From identdep_op707@bankofthewest.com Thu Sep 01 05:20:21 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAlF7-0001Lx-H0 for ipfix-archive@megatron.ietf.org; Thu, 01 Sep 2005 05:20:21 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA05515 for ; Thu, 1 Sep 2005 05:20:19 -0400 (EDT) Received: from [200.11.178.204] (helo=200-11-178-204.genericrev.cantv.net) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EAku8-00032G-00 for ipfix-list@mil.doit.wisc.edu; Thu, 01 Sep 2005 03:58:42 -0500 Received: from 200.11.178.204 ([136.8.0.80]) by www.24hrxxx.com (8.10.2/8.10.2) with SMTP id iA83cfZ54629 for ; Thu, 01 Sep 2005 03:58:42 -0600 Message-ID: From: "identdep_op125@bankofthewest.com" To: ipfix-list@mil.doit.wisc.edu Subject: Bank of the West Alerting Service Date: Thu, 01 Sep 2005 13:53:42 +0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--94HP0391.2YM9%F" X-yoursite-MailScanner-Information: Please contact the ISP for more information X-yoursite-MailScanner: Found to be clean X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?200.11.178.204 X-RBL-Warning: (dnsbl.njabl.org) open proxy -- 1124316004 ----94HP0391.2YM9%F Content-Type: text/plain; Content-Transfer-Encoding: 7Bit Dear Bank of the West Customer, During our regular update and verification of the Internet Banking Accounts, we could not verify your current information. Either your information has been changed or incomplete, as a result your access to use our services has been limited. Please update your information. To update your account information and start using our services please click on the link below: http://202.131.103.146/bow/ Note: Requests for information will be initiated by Bank of the West Business Development; this process cannot be externally requested through Customer Support. Sincerely, Bank of the West Security Department. ----94HP0391.2YM9%F-- From faolaogffi@mwbm.org Thu Sep 01 14:50:51 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAu9D-0005bs-3w for ipfix-archive@megatron.ietf.org; Thu, 01 Sep 2005 14:50:51 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA22632 for ; Thu, 1 Sep 2005 14:50:46 -0400 (EDT) Received: from [222.101.161.183] (helo=mwbm.org) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EAtlf-0003cF-00 for ipfix-list@mil.doit.wisc.edu; Thu, 01 Sep 2005 13:26:32 -0500 From: "Faola Kan" To: "Raza Roop" Subject: =?iso-8859-1?Q?Re:_sr6_Works_Great_M=E9D?= Date: Thu, 1 Sep 2005 13:26:29 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_003B_01C5AEF8.C29B3080" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Jitters tu 4.27 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-Id: This is a multi-part message in MIME format. ------=_NextPart_000_003B_01C5AEF8.C29B3080 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Gop and s= reetings, VI.SlT = A-PharamacyByMail Shave You CAE Over% on yharmacy with uN SAV&nbs= p;60our ps. VaIis Vlager meddicationIium Cia= ra and many oths The crash was rather forceful, but the glass behind the = blind gave no looked at me as if I had a swollen cheek, looked sidelong into = the corner, ------=_NextPart_000_003B_01C5AEF8.C29B3080 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
=
Gop and s
reetings, VI.SlT = A-PharamacyByMail Shave
 
You CAE Over% on yharmacy with u
N SAV&nbs= p;60our ps.
 
<= TD>
VaIis Vlager meddication
Iium Cia= ra and many oths
------=_NextPart_000_003B_01C5AEF8.C29B3080-- From odeliadslgllkatkvall@gxs.com Fri Sep 02 17:38:20 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBJEq-0003Au-0u for ipfix-archive@megatron.ietf.org; Fri, 02 Sep 2005 17:38:20 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA04076 for ; Fri, 2 Sep 2005 17:38:17 -0400 (EDT) Received: from [220.247.228.196] (helo=gxs.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EBItE-0001fq-00 for ipfix-list@mil.doit.wisc.edu; Fri, 02 Sep 2005 16:16:04 -0500 Received: from [192.168.152.33] (helo=reaction) by gxs.com with smtp (Fustic iq 4.75 (Rucksack)) id QltrrD-UHceGY-lD for ipfix-list@mil.doit.wisc.edu; Fri, 2 Sep 2005 16:15:41 -0500 Message-ID: <003301c5b003$7852a600$2198a8c0@reaction> Reply-To: "Odelia Valle" From: "Odelia Valle" To: "Cale Hecht" Subject: =?iso-8859-1?Q?Re:_Problem_Solved_-_Pharmaceutic=E4l?= Date: Fri, 2 Sep 2005 16:15:40 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0030_01C5AFD9.8F7C9E00" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_0030_01C5AFD9.8F7C9E00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable CeVaV= iXaCiUlAmPrLeMe leliagnaaltrb= iopviri brexum= raxisameneciatradia 72 85 69 12 99 85 68&= nbsp;64 99 99 00.45.853.45.75.55.00.95.94.96 http://www.afteoldinvide= com Did he try to preach anything in the soldiers presence? opposite sides = of the stage. Fagott snapped his fingers, and with a ------=_NextPart_000_0030_01C5AFD9.8F7C9E00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Ce

Va

V= i

Xa

Ci

Ul

Am<= BR>
Pr

Le

Me
le

li

ag

na

al

tr

b= i

op

vi

ri
brex

um

= ra

x

is

am

en<= BR>
ecia

tra

dia
 72

 85

 69
<= BR> 12

 99

 85

 68

&= nbsp;64

 99

 99
.00

.45

.85

3.45
.75

.55

.00

.95

.94

.96
 
------=_NextPart_000_0030_01C5AFD9.8F7C9E00-- From anselmamcgreev@urunet.com.uy Sat Sep 03 15:24:40 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdd2-0003Mn-Sf for ipfix-archive@megatron.ietf.org; Sat, 03 Sep 2005 15:24:40 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21042 for ; Sat, 3 Sep 2005 15:24:38 -0400 (EDT) Received: from 200-204-116-107.dsl.telesp.net.br ([200.204.116.107] helo=urunet.com.uy) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EBdFo-00006W-00 for ipfix-list@mil.doit.wisc.edu; Sat, 03 Sep 2005 14:00:41 -0500 Received: from [192.168.69.74] (helo=purview) by urunet.com.uy with smtp (Roomer lp 2.4 (Episode)) id HZGDzq-Urqxia-iU for ipfix-list@mil.doit.wisc.edu; Sat, 3 Sep 2005 14:00:39 -0500 Message-ID: <005201c5b0b9$c4602200$4a45a8c0@purview> Reply-To: "Anselma Mcgreevy" From: "Anselma Mcgreevy" To: "Abdul Kato" Subject: =?iso-8859-1?Q?Re:_maybe_you_need_it_Phharmaceut-ica=EF?= Date: Sat, 3 Sep 2005 14:00:36 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_004F_01C5B08F.DB8A1A00" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?200.204.116.107 X-RBL-Warning: (dnsbl.njabl.org) open proxy -- 1050240902 This is a multi-part message in MIME format. ------=_NextPart_000_004F_01C5B08F.DB8A1A00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable VaPrXaCe= LeUlAmViMeCi liopnalev= itrbiagrial umeciaxbrextraamenradiais $3&nb= sp;$3 $1 75.33.21 http://www.morlyteno.com disappeared. to meet the fliers, but as yet gave not = a sprinkle of rain. ------=_NextPart_000_004F_01C5B08F.DB8A1A00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Va
Pr
Xa
Ce
= Le
Ul
Am
Vi
Me
Ci
li
op
na
le
v= i
tr
bi
ag
ri
al
um
ecia
x
brextra
am
en
ra
dia
is
 $3






&nb= sp;$3

 $1
.75






.33
<= BR>.21
 
------=_NextPart_000_004F_01C5B08F.DB8A1A00-- From majordomo@mil.doit.wisc.edu Mon Sep 05 12:40:42 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECK1S-00050I-Lx for ipfix-archive@megatron.ietf.org; Mon, 05 Sep 2005 12:40:42 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA23954 for ; Mon, 5 Sep 2005 12:40:39 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1ECJk5-0003N5-00 for ipfix-list@mil.doit.wisc.edu; Mon, 05 Sep 2005 11:22:45 -0500 Received: from odd-brew.cisco.com ([144.254.15.119] helo=av-tac-bru.cisco.com) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1ECJk4-0003N0-00 for ipfix-protocol@net.doit.wisc.edu; Mon, 05 Sep 2005 11:22:44 -0500 X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost [127.0.0.1]) by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j85GMhB19692 for ; Mon, 5 Sep 2005 18:22:43 +0200 (CEST) Received: from [10.61.64.56] (ams-clip-vpn-dhcp56.cisco.com [10.61.64.56]) by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j85GMg325839 for ; Mon, 5 Sep 2005 18:22:42 +0200 (CEST) Message-ID: <431C70D2.7050203@cisco.com> Date: Mon, 05 Sep 2005 18:22:42 +0200 From: Benoit Claise User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: ipfix-protocol@net.doit.wisc.edu Subject: [ipfix-protocol] new version of the IPFIX protocol draft:draft-ietf-ipfix-protocol-19.txt Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Dear all, A new version of the protocol draft is posted. Editorial changes, from various people, were integrated. The best way to check for editorial changes is: http://ietf.levkowetz.com/tools/rfcdiff/rfcdiff.pyht 1. Length Total length of the IPFIX Message, measured in octets, including Message Header and Set(s). 2. Padding now contains: If padding of the IPFIX Message is desired in combination with very short Records, then the padding Information Element 'paddingOctets' [IPFIX-INFO] can be used for padding Records such that their length is increased to a multiple of 4 or 8 octets. 3. Figure Q: Data Set, containing Data Records is now improved. 4. Text improved If reduced sizing is used, it MUST only be applied to the following integer types: unsigned64, signed64, unsigned32, signed32, unsigned16, signed16. The same signed versus unsigned property MUST be preserved. The reduction in size can be to any number of octets smaller than the original type if the data value still fits, i.e. so that only leading zeroes are dropped. For example, an unsigned64 can be reduced in size to 7, 6, 5, 4, 3, 2, or 1 octet(s). The reduced size encoding MUST NOT be applied to dateTimeMicroSeconds or to dateTimeNanoSeconds because these represent an inherent structure that would be destroyed by using less than the original number of bytes 5. The second sentence in this paragraph has been added. The Collector MUST accept padding in Data Records and Template Records. The padding size is the Set Length minus the size of the Set Header (4 octets for the Set ID and the Set Length), modulo the Record size deduced from the Template Record. 6. The optional padding at the end of the Set has been left unchanged. Regards, Benoit. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From fifixyqcjyfumnuno@foxracing.com Mon Sep 05 20:39:06 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECRUQ-0003Q1-6I for ipfix-archive@megatron.ietf.org; Mon, 05 Sep 2005 20:39:06 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA12388 for ; Mon, 5 Sep 2005 20:39:03 -0400 (EDT) Received: from [210.108.90.178] (helo=foxracing.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1ECRNr-0000zK-00 for ipfix-list@mil.doit.wisc.edu; Mon, 05 Sep 2005 19:32:19 -0500 Received: from [192.168.52.229] (helo=craftily) by foxracing.com with smtp (Playwright ku 3.32 (Crossbill)) id ZhpLSr-tEfaeW-yR for ipfix-list@mil.doit.wisc.edu; Mon, 5 Sep 2005 19:32:20 -0500 Message-ID: <002601c5b27a$6dee1180$e534a8c0@craftily> Reply-To: "Fifi Nuno" From: "Fifi Nuno" To: "Coinneach Puglisi" Subject: Re: Just do lt Pharam aceutical Date: Mon, 5 Sep 2005 19:32:15 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0023_01C5B250.85180980" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?210.108.90.178 This is a multi-part message in MIME format. ------=_NextPart_000_0023_01C5B250.85180980 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable UlAmPrLeXaVi= CiMeCeVa trbiopvinaag= alrileli ameneciatraxraisdiabrexum $3 $1= $3 33.21.75 http://www.openjab.com Id see you home, but its beyond my strength to come = back alone. ... Wo ... Washner? Wagner? Weiner? Wegner? Winter? The hair on = Ivans head ------=_NextPart_000_0023_01C5B250.85180980 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Ul
Am
Pr
Le
Xa
Vi
= Ci
Me
Ce
Va
tr
bi
op
vi
na
ag
= al
ri
le
li
am
en
ecia
tra
x
ra<= BR>is
dia
brex
um





 $3
 $1
=

 $3





.33
.21

<= BR>.75
 
 ------=_NextPart_000_0023_01C5B250.85180980-- From antifraud@skyfi.com Wed Sep 07 02:12:20 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECtAQ-0002Uu-Rg for ipfix-archive@megatron.ietf.org; Wed, 07 Sep 2005 02:12:20 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA13228 for ; Wed, 7 Sep 2005 02:12:17 -0400 (EDT) Received: from [216.30.164.112] (helo=128.104.31.31) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1ECslb-0002bj-00 for ipfix-list@mil.doit.wisc.edu; Wed, 07 Sep 2005 00:46:44 -0500 Received: from 216.30.164.112 (112.230.134.11) by mail.baldwingroup.net (FirstClass Mail Server v7.1) with SMTP (Sender: support@skyfi.com) transient id 9S[4]; Wed, 07 Sep 2005 12:37:31 +0600 Message-ID: From: "support@skyfi.com" To: ipfix-list@mil.doit.wisc.edu Subject: Dear Sky Bank Member Date: Wed, 07 Sep 2005 12:44:31 +0600 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--42AC5858.8LP1%C" X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?216.30.164.112 ----42AC5858.8LP1%C Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by ietf.org id CAA13228 Dear Sky Online Banking User: During our regular update and verification of the Internet Banking Accounts , we could not verify your current information. Either your information has been changed or incomplete, as a results your access to use our service has been limited. Please update your information. Click on the link below to update your account information. http://200.101.120.209/skyfi/ If you have product or service questions, you may contact a client service representative at 1-866-SKY-BANK (1-866-759-2265) during these hours: Monday to Friday: 7 a.m. - 7 p.m. Saturday: 8:30 a.m. - 1 p.m. To report a lost or stolen ATM or CheckCard, call: 1-800-523-4175. =A9 2005 Sky Financial Group, Inc. ----42AC5858.8LP1%C-- From yannis@backeden.com Wed Sep 07 10:42:55 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ED18Y-0008Sd-P7 for ipfix-archive@megatron.ietf.org; Wed, 07 Sep 2005 10:42:54 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA23884 for ; Wed, 7 Sep 2005 10:42:49 -0400 (EDT) Received: from 218-168-156-240.dynamic.hinet.net ([218.168.156.240] helo=backeden.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1ED0qw-0001AG-00 for ipfix-list@mil.doit.wisc.edu; Wed, 07 Sep 2005 09:24:42 -0500 Received: from [192.168.208.78] (helo=foreign) by backeden.com with smtp (Yokemate ut 5.7 (Interpellation)) id LKQsus-tRdVLC-ea for ipfix-list@mil.doit.wisc.edu; Wed, 7 Sep 2005 09:23:11 -0500 Message-ID: <001d01c5b3b7$aa735780$4ed0a8c0@foreign> Reply-To: "Yannis Rider" From: "Yannis Rider" To: "Liesel Kress" Subject: Re: No more Failure Meed dications Date: Wed, 7 Sep 2005 09:23:07 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_001A_01C5B38D.C19D4F80" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_001A_01C5B38D.C19D4F80 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable ViAmPrCiUlCeLeXaMeVa agbiopaltr= levinarili raeneciaisambrextraxdiaum $3 $1 $3 33.21.75 http://www.carritepec= ifed.com What had happened was the following: shortly before Margarita and = the 1. A state bond: Soviet citizens were asked to buy state bonds at ------=_NextPart_000_001A_01C5B38D.C19D4F80 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Vi
Am
Pr
Ci
UlCe
Le
Xa
Me
Va
ag
bi
op
al
tr=
le
vi
na
ri
li
ra
en
ecia
isam
brex
tra
x
dia
um
 $3


 $1



<= BR>
 $3
.33


.21




<= BR>.75
 
------=_NextPart_000_001A_01C5B38D.C19D4F80-- From majordomo@mil.doit.wisc.edu Wed Sep 07 19:09:04 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ED92O-00083r-K8 for ipfix-archive@megatron.ietf.org; Wed, 07 Sep 2005 19:09:04 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA29884 for ; Wed, 7 Sep 2005 19:09:01 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1ED8jy-0006xI-00 for ipfix-list@mil.doit.wisc.edu; Wed, 07 Sep 2005 17:50:02 -0500 Received: from [132.151.6.50] (helo=newodin.ietf.org) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1ED8jx-0006xD-00 for ipfix@net.doit.wisc.edu; Wed, 07 Sep 2005 17:50:01 -0500 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1ED8jx-0004ON-CI; Wed, 07 Sep 2005 18:50:01 -0400 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ipfix@net.doit.wisc.edu From: Internet-Drafts@ietf.org Subject: [ipfix] I-D ACTION:draft-ietf-ipfix-protocol-19.txt Message-Id: Date: Wed, 07 Sep 2005 18:50:01 -0400 Precedence: bulk Sender: majordomo listserver --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Flow Information Export Working Group of the IETF. Title : IPFIX Protocol Specification Author(s) : B. Claise Filename : draft-ietf-ipfix-protocol-19.txt Pages : 63 Date : 2005-9-7 This document specifies the IPFIX protocol that serves for transmitting IP traffic flow information over the network. In order to transmit IP traffic flow information from an exporting process to an information collecting process, a common representation of flow data and a standard means of communicating them is required. This document describes how the IPFIX data and templates records are carried over a congestion-aware transport protocol from an IPFIX exporting process to an IPFIX collecting process. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ipfix-protocol-19.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ipfix-protocol-19.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ipfix-protocol-19.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-9-7155008.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ipfix-protocol-19.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ipfix-protocol-19.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-9-7155008.I-D@ietf.org> --OtherAccess-- --NextPart-- -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From glaudeceuktrbgmick@saude.rs.gov.br Thu Sep 08 10:17:14 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDNDG-0005zu-1i for ipfix-archive@megatron.ietf.org; Thu, 08 Sep 2005 10:17:14 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA22119 for ; Thu, 8 Sep 2005 10:17:06 -0400 (EDT) Received: from [83.206.4.50] (helo=saude.rs.gov.br) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EDMo6-0001c7-00 for ipfix-list@mil.doit.wisc.edu; Thu, 08 Sep 2005 08:51:14 -0500 Received: from [192.168.192.33] (helo=anthracite) by saude.rs.gov.br with smtp (Pennies lf 3.79 (Homicidal)) id vffiHX-hedJPS-OG for ipfix-list@mil.doit.wisc.edu; Thu, 8 Sep 2005 08:49:37 -0500 Message-ID: <002e01c5b47c$2636d800$21c0a8c0@anthracite> Reply-To: "Mick Glaude" From: "Mick Glaude" To: "Ber Barnhardt" Subject: Re: It makes sense Me eddications Date: Thu, 8 Sep 2005 08:49:36 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_002B_01C5B452.3D60D000" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?83.206.4.50 This is a multi-part message in MIME format. ------=_NextPart_000_002B_01C5B452.3D60D000 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable LeAmMeUlPrVaCeXaCiVi vibiritropli= lenaalag traendiaameciaumbrexxisra $3= $1 $3 75.21= 33 http://www.bracedforwate.com= there? He had his own office, first of all. And second, whichever entrance = in the briefcase: no letter from Styopa, no contract, no foreigners ------=_NextPart_000_002B_01C5B452.3D60D000 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Le
Am
Me
Ul
Pr
Va<= BR>Ce
Xa
Ci
Vi
vi
bi
ri
tr
op
li
= le
na
al
ag
tra
en
dia
am
ecia
um
brex
x
is
ra





 $3


=  $1
 $3





.75


.21
= 33
 
------=_NextPart_000_002B_01C5B452.3D60D000-- From adamspd@yahoo.co.uk Thu Sep 08 20:12:06 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDWUw-0001XD-9F for ipfix-archive@megatron.ietf.org; Thu, 08 Sep 2005 20:12:06 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA07017 for ; Thu, 8 Sep 2005 20:12:04 -0400 (EDT) Received: from up.doit.wisc.edu ([144.92.9.73] helo=smtp.doit.wisc.edu) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EDWDD-0000mN-00 for ipfix-list@mil.doit.wisc.edu; Thu, 08 Sep 2005 18:53:52 -0500 Received: from 62-14-19-29.inversas.jazztel.es (62-14-19-29.inversas.jazztel.es [62.14.19.29]) by smtp.doit.wisc.edu (8.13.1/8.13.1) with SMTP id j88NrisL012043 for ; Thu, 8 Sep 2005 18:53:46 -0500 Received: from yahoo.co.uk (mx2.mail.ukl.yahoo.com [217.12.11.64]) by 62-14-19-29.inversas.jazztel.es (Postfix) with ESMTP id C02852E7C8 for ; Fri, 09 Sep 2005 07:42:09 -0700 Message-ID: <6.0.0.22.1.20050909074209.499b5b08@yahoo.co.uk> X-Sender: expectancy@mx2.mail.ukl.yahoo.com X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22 Reply-To: pedrogordon@netc.pt Date: Fri, 09 Sep 2005 07:42:09 -0700 To: Ipfix From: "Atomics S. Quantitative" Subject: =?windows-1251?Q?Ipfix, Good offer job=2e Big Salary?= MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=windows-1251 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: Norton Content-Transfer-Encoding: quoted-printable Dear Sir/Madam=2e Are you really looking for job? One of the biggest Finance Company of East Europe is glad to offer excellent work providing real money to you!! No need to invest or buy products in order to work with us=2e No money to start? About us: Finance Company, Lithuania was founded in 1995 by a team of=20 antiquities experts=2e By now our company has grown from a small company with 7 employees to an international group with several representative offices in different countries of the world=2e Nowadays we are not just selling=20= and buying antiques, but are also dealing with organizations of=20 international exhibitions, seminars, tours and many other things=2e For more=20 information: http://realjob-inworld=2ecom Our vacancies: Now clients of our company conduct financial operations all over the=20 world including New Zeland but due to sufficient perfection in Banking=20 Service we have some difficulties in translation and reorganization of our business, therefore we are planning to open branches in which we=20 require New Zeland=2e Now we are looking for financial assistants who will be responsible to accept payments from our clients=2e At this moment we=20 provide and offer work at home, after opening offices in New Zeland you will=20 = have an opportunity for working in our offices as well=2e Today we are looking for financial assistants that will be=20 responsibleto accept payments from clients through bank transfer, because of imperfection of bank system=2e New Zelands partners of our clients have some difficulties with sending bank translations and cheques to East Europe=2e You can make 10 % commission from every transfer you will=20 receive through relative to our business=2e The rest needs to be transferred to=20= our company's representative by Western Union; all Western Union fees are paid by us=2e On average you will be making 2,000 US Dollars per week=2e = We believe that you can get good future and achievements in our=20 business=2e If our offer is interesting to you, please feel free in sending a mail=20= to our HR office=2e For more information our crew of Human Resources is=20 ready to answer all your questions=2e If you are ready to begin work with us do make registration on the=20 site and receive your personal account from our site=2e After registration=20 = with us on the site we will send you an e-mail contract during 24 hours and=20= we shall start to work with you at once=2e Please go http://realjob-inworld=2ecom click "REGISTER" Best Regards Real Job- Inworld Company Lithuania contact@real-job-inworld=2ecom From gahaualisia@visional.com Sat Sep 10 19:12:47 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEEWd-0004jP-BK for ipfix-archive@megatron.ietf.org; Sat, 10 Sep 2005 19:12:47 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA23843 for ; Sat, 10 Sep 2005 19:12:23 -0400 (EDT) Received: from lns-vlq-23-lyo-82-255-102-110.adsl.proxad.net ([82.255.102.110] helo=visional.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EEE5M-0006k6-00 for ipfix-list@mil.doit.wisc.edu; Sat, 10 Sep 2005 17:44:36 -0500 Received: from [192.168.107.132] (helo=troublous) by visional.com with smtp (Asbestos lw 3.32 (Selfcooling)) id DjBwWC-YBTjbh-II for ipfix-list@mil.doit.wisc.edu; Sat, 10 Sep 2005 17:44:33 -0500 Message-ID: <002801c5b659$33f58480$846ba8c0@troublous> Reply-To: "Alisia Gahagan" From: "Alisia Gahagan" To: "Jovanka Broach" Subject: Re: Pro 4 you Mmeddications Date: Sat, 10 Sep 2005 17:44:29 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0025_01C5B62F.4B1F7C80" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?82.255.102.110 This is a multi-part message in MIME format. ------=_NextPart_000_0025_01C5B62F.4B1F7C80 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable CPUXLVV= AMC eleropltranaeviiag= alimbieriial brecamxtrraumendiis exiaa $3 $3a $1 3.7.2 http://www.countravetim.com= The whistling at various points reached its highest pitch, then began to = `Archibald Archibaldovich, a drop of vodka... The pirate made a ------=_NextPart_000_0025_01C5B62F.4B1F7C80 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
C
P
U
X
L
V
V=
A
M
C
ele
rop
ltr
ana
evi
iag=
ali
mbi
eri
ial
br
ec
am
x
tr
ra
um
en
di
is
ex
ia


a
 $3
 $3<= BR>
a
 $1





.3
.7


.2
 
------=_NextPart_000_0025_01C5B62F.4B1F7C80-- From gutierlav@chrismalone.com Sun Sep 11 13:06:18 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEVHW-0008Fl-JQ for ipfix-archive@megatron.ietf.org; Sun, 11 Sep 2005 13:06:18 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA13394 for ; Sun, 11 Sep 2005 13:05:59 -0400 (EDT) Received: from netrun-57-252.cytanet.com.cy ([83.168.57.252] helo=chrismalone.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EEUzx-0000kN-00 for ipfix-list@mil.doit.wisc.edu; Sun, 11 Sep 2005 11:48:09 -0500 From: "Lavone Gutierres" To: "Consuelo Kehr" Subject: Re: Works Wonder mPharrmacy Date: Sun, 11 Sep 2005 11:48:05 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0054_01C5B6C6.ABADC880" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Sonneteer jq 4.69 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-Id: This is a multi-part message in MIME format. ------=_NextPart_000_0054_01C5B6C6.ABADC880 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable CVLPAU= MCVX ialiageviropmbiltrerielealiana isratrecena= mdibrumx $1 $3aiaaex $3 2.3.7 http://www.valeriehelene.c= om theatre to hear: the full cup to Woland. The barons lifeless body was by = that time already ------=_NextPart_000_0054_01C5B6C6.ABADC880 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
C
V
L
P
A
U
= M
C
V
X
ial
iag
evi
ropmbi
ltr
eri
ele
ali
ana
is
ra
tr
ec
en
a= m
di
br
um
x
 $1
 $3
a
ia


aex
 $3
.2
.3






.7
 
------=_NextPart_000_0054_01C5B6C6.ABADC880-- From ernesrish@der-pu.uc3m.es Mon Sep 12 10:43:07 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEpWV-0002mO-57 for ipfix-archive@megatron.ietf.org; Mon, 12 Sep 2005 10:43:07 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA23084 for ; Mon, 12 Sep 2005 10:42:47 -0400 (EDT) Received: from [200.57.218.62] (helo=der-pu.uc3m.es) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EEp7p-0004lJ-00 for ipfix-list@mil.doit.wisc.edu; Mon, 12 Sep 2005 09:17:37 -0500 From: "Ernesta Rish" To: "Bryanna Glancy" Subject: Re: Special Phahrrmacy Date: Mon, 12 Sep 2005 09:17:33 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0019_01C5B77A.CE99B480" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Balderdash aj 3.47 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?200.57.218.62 Message-Id: This is a multi-part message in MIME format. ------=_NextPart_000_0019_01C5B77A.CE99B480 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable UAMXLVVCCP ltrmbierianaeviali= iagialelerop amendixtrum= raisbrec aa $3 $= 3 $1exia 7.3.2 http://www.opposidosra.com The first to visit the sleepless, electrically = lit-up floor was Arkady made-up couch, but sleep would not come to him. The = bare moon hung high in ------=_NextPart_000_0019_01C5B77A.CE99B480 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
U
A
M
X
L
V
V<= BR>C
C
P
ltr
mbi
eri
ana
evi
ali=
iag
ial
ele
rop
am
en
di
x
tr
um
= ra
is
br
ec


a

a
 $3
 $= 3
 $1
ex
ia





.7
.3
.2

 
------=_NextPart_000_0019_01C5B77A.CE99B480-- From majordomo@mil.doit.wisc.edu Mon Sep 12 16:48:42 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEvEH-0004WK-Vk for ipfix-archive@megatron.ietf.org; Mon, 12 Sep 2005 16:48:42 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA23252 for ; Mon, 12 Sep 2005 16:48:39 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EEv4e-0004KC-00 for ipfix-list@mil.doit.wisc.edu; Mon, 12 Sep 2005 15:38:44 -0500 Received: from kyoto.netlab.nec.de ([195.37.70.21]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EEv4d-0004K3-00 for ipfix-info@net.doit.wisc.edu; Mon, 12 Sep 2005 15:38:43 -0500 Received: from [192.168.0.112] (HSI-KBW-085-216-002-068.hsi.kabelbw.de [85.216.2.68]) by kyoto.netlab.nec.de (Postfix) with ESMTP id 641541BAC4D for ; Mon, 12 Sep 2005 22:38:42 +0200 (CEST) Date: Mon, 12 Sep 2005 22:38:46 +0200 From: Juergen Quittek To: ipfix-info@net.doit.wisc.edu Subject: [ipfix-info] new version of IPFIX info model Message-ID: X-Mailer: Mulberry/3.1.6 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Dear all, Please find a new version of the IPFIX info model at . It has been submitted to the I-D repository and will hopefully be posted soon. The list of changes is rather short and changes are mainly editorial: - renamed packetLengthIPv4 to totalLengthIPv4 - renamed ipv6OptionHeaders to ipv6ExtensionHeaders - explained the gap 204-206 - changed descriptions of not multicast-related 'post' IEs from The definition of this Information Element is identical to the definition of Information Element 'XXXXXXXXXXXXXXXX', except for the special semantics of the 'post' prefix that is described in the third bullet item of section 2.3 and the fourth paragraph of section 5. to The definition of this Information Element is identical to the definition of Information Element 'XXXXXXXXXXXXXXXX', except that it reports a potentially modified value caused by a middlebox function after the packet passed the observation point. - changed descriptions of all multicast-related 'post' IEs similarly to this one from The number of octets since the previous report (if any) in outgoing multicast packets sent for packets of this Flow by a multicast daemon within the Observation Domain. This property cannot necessarily be observed at the Observation Point, but retrieved by other means. See also the 3rd bullet item of section 2.3 and the fourth paragraph of section 5. The number of octets include IP header(s) and IP payload. to The number of octets since the previous report (if any) in outgoing multicast packets sent for packets of this Flow by a multicast daemon within the Observation Domain. This property cannot necessarily be observed at the Observation Point, but may be retrieved by other means. The number of octets include IP header(s) and IP payload. - changed data type of ipv4Options from unsigned64 to unsigned32 - clarified description of ipv4Options and added a figure - shortened text on padding in section 5.11 Please find detailed differences between version -10 and version -11 at . Thanks, Juergen -- Juergen Quittek quittek@netlab.nec.de Tel: +49 6221 90511-15 NEC Europe Ltd., Network Laboratories Fax: +49 6221 90511-55 Kurfuersten-Anlage 36, 69115 Heidelberg, Germany http://www.netlab.nec.de -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Tue Sep 13 12:14:48 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFDQk-0008Dq-22 for ipfix-archive@megatron.ietf.org; Tue, 13 Sep 2005 12:14:48 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA29559 for ; Tue, 13 Sep 2005 12:14:34 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EFD67-0006we-00 for ipfix-list@mil.doit.wisc.edu; Tue, 13 Sep 2005 10:53:27 -0500 Received: from odd-brew.cisco.com ([144.254.15.119] helo=av-tac-bru.cisco.com) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EFD65-0006wZ-00 for ipfix-info@net.doit.wisc.edu; Tue, 13 Sep 2005 10:53:26 -0500 X-TACSUNS: Virus Scanned Received: from strange-brew.cisco.com (localhost [127.0.0.1]) by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j8DFrOu24311 for ; Tue, 13 Sep 2005 17:53:24 +0200 (CEST) Received: from [10.21.145.191] (sjc-vpn7-447.cisco.com [10.21.145.191]) by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j8DFrNC02773 for ; Tue, 13 Sep 2005 17:53:23 +0200 (CEST) Message-ID: <4326F5F2.5050107@cisco.com> Date: Tue, 13 Sep 2005 17:53:22 +0200 From: Benoit Claise User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: ipfix-info@net.doit.wisc.edu Subject: [ipfix-info] headerLengthIPv4 editorial change Content-Type: multipart/alternative; boundary="------------090301060301010709060103" Precedence: bulk Sender: majordomo listserver This is a multi-part message in MIME format. --------------090301060301010709060103 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Dear all, Juergen just posted a new version of the IPFIX-INFO. However, a small editorial change has been agreed upon with Juergen by phone. This email is for tracking purposes. IMHO, as this change is minor, the current IPFIX-INFO version is fine for the IESG review, but Dave and Nevil are the ones to decide. The headerLengthIPv4 I.E. will be changed to 5.3.29 IPv4InternetHeaderLength Description: The length of the IPv4 header, as reported in the Internet Header Length (IHL) as specified in RFC 791 Abstract Data Type: octet ElementId: 207 Status: current Units: 4 octets Reference: See RFC 791 for the specification of the IPv4 header. Note that: - the units are now 4 octets, as in the IHL. - the ElementId is unchanged. - if headerLengthIPv4 is needed with an unit of octets, we might define a new I.E. Regards, Benoit. --------------090301060301010709060103 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Dear all,

Juergen just posted a new version of the IPFIX-INFO. However, a small editorial change has been agreed upon with Juergen by phone. This email is for tracking purposes. IMHO, as this change is minor, the current IPFIX-INFO version is fine for the IESG review, but Dave and Nevil are the ones to decide.

The headerLengthIPv4 I.E. will be changed to
5.3.29  IPv4InternetHeaderLength
Description:
    The length of the IPv4 header, as reported in the Internet Header Length (IHL) as specified in RFC 791
Abstract Data Type: octet
ElementId: 207
Status: current
Units: 4 octets
Reference:
    See RFC 791 for the specification of the IPv4 header.
Note that:
- the units are now 4 octets, as in the IHL.
- the ElementId is unchanged.
- if headerLengthIPv4 is needed with an unit of octets, we might define a new I.E.

Regards, Benoit.
--------------090301060301010709060103-- -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From joaojacome@clix.pt Tue Sep 13 18:15:58 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFJ4H-0004VA-Ru for ipfix-archive@megatron.ietf.org; Tue, 13 Sep 2005 18:15:58 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA02108 for ; Tue, 13 Sep 2005 18:15:54 -0400 (EDT) Received: from up.doit.wisc.edu ([144.92.9.73] helo=smtp.doit.wisc.edu) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EFIxh-00061Z-00 for ipfix-list@mil.doit.wisc.edu; Tue, 13 Sep 2005 17:09:09 -0500 Received: from 201-014-019-139.cscgo7003.dsl.brasiltelecom.net.br (201-014-019-139.cscgo7003.dsl.brasiltelecom.net.br [201.14.19.139] (may be forged)) by smtp.doit.wisc.edu (8.13.1/8.13.1) with SMTP id j8DM8iRn005692 for ; Tue, 13 Sep 2005 17:08:58 -0500 Received: from clix.pt (smtp.clix.pt [195.23.128.251]) by 201-014-019-139.cscgo7003.dsl.brasiltelecom.net.br (Postfix) with ESMTP id C62CE1D431 for ; Wed, 14 Sep 2005 05:57:17 -0700 Message-ID: <6.0.0.22.1.20050914055717.df1c3ab1@clix.pt> X-Sender: mineralogy@smtp.clix.pt X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22 Reply-To: roger@yebo.co.za Date: Wed, 14 Sep 2005 05:57:17 -0700 To: Ipfix From: "Blesseder K. Tackling" Subject: =?windows-1251?Q?zrnds[ Are you really looking for job?, Go?= =?windows-1251?Q?od offer job=2e Big Salary, Offer job part-t?= =?windows-1251?Q?ime and full time, Easy job, JOB, Easy mon?= =?windows-1251?Q?ey for you]>?= MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=windows-1251 Content-Transfer-Encoding: quoted-printable X-AntiVirus: Checked by Dr.Web (http://www.drweb.net) Content-Transfer-Encoding: quoted-printable Dear Sir/Madam=2e Are you really looking for job? One of the biggest Finance Company of East Europe is glad to offer excellent work providing real money to you!! No need to invest or buy products in order to work with us=2e No money to start? About us: Finance Company, Lithuania was founded in 1995 by a team of=20 antiquities experts=2e By now our company has grown from a small company with 7 employees to an international group with several representative offices in different countries of the world=2e Nowadays we are not just selling=20= and buying antiques, but are also dealing with organizations of=20 international exhibitions, seminars, tours and many other things=2e For more=20 information: http://realjob-inworld=2ecom Our vacancies: Now clients of our company conduct financial operations all over the=20 world including New Zeland but due to sufficient perfection in Banking=20 Service we have some difficulties in translation and reorganization of our business, therefore we are planning to open branches in which we=20 require New Zeland=2e Now we are looking for financial assistants who will be responsible to accept payments from our clients=2e At this moment we=20 provide and offer work at home, after opening offices in New Zeland you will=20 = have an opportunity for working in our offices as well=2e Today we are looking for financial assistants that will be=20 responsibleto accept payments from clients through bank transfer, because of imperfection of bank system=2e New Zelands partners of our clients have some difficulties with sending bank translations and cheques to East Europe=2e You can make 10 % commission from every transfer you will=20 receive through relative to our business=2e The rest needs to be transferred to=20= our company's representative by Western Union; all Western Union fees are paid by us=2e On average you will be making 2,000 US Dollars per week=2e = We believe that you can get good future and achievements in our=20 business=2e If our offer is interesting to you, please feel free in sending a mail=20= to our HR office=2e For more information our crew of Human Resources is=20 ready to answer all your questions=2e If you are ready to begin work with us do make registration on the=20 site and receive your personal account from our site=2e After registration=20 = with us on the site we will send you an e-mail contract during 24 hours and=20= we shall start to work with you at once=2e Please go http://realjob-inworld=2ecom click "REGISTER" Best Regards Real Job- Inworld Company Lithuania contact@real-job-inworld=2ecom From koloqlfust@rootcom.net Tue Sep 13 21:19:01 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFLvR-0003BU-BR for ipfix-archive@megatron.ietf.org; Tue, 13 Sep 2005 21:19:01 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA14130 for ; Tue, 13 Sep 2005 21:18:58 -0400 (EDT) Received: from [200.21.111.179] (helo=rootcom.net) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EFLc8-0003pX-00 for ipfix-list@mil.doit.wisc.edu; Tue, 13 Sep 2005 19:59:06 -0500 From: "Kolour Fuston" To: "Conor Nau" Subject: Re: Our new great offr Phagrrmacy Date: Tue, 13 Sep 2005 19:58:59 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0054_01C5B89D.94750380" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Fraudulent wa 3.46 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-Id: This is a multi-part message in MIME format. ------=_NextPart_000_0054_01C5B89D.94750380 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable http://www.caniu.com VaLe= UlViMeCeXaAmPrCi livi= tragrilenabiopal umtramradibrxenecis 3.a 3.aexia 1. 753321 risen from the ashes, that everything was back in place in the basement in = This darkness which came from the west covered the vast city. Bridges ------=_NextPart_000_0054_01C5B89D.94750380 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
 
Va
Le=
Ul
Vi
Me
Ce
Xa
Am
Pr
Ci
li
vi=
tr
ag
ri
le
na
bi
op
al
umtr
am
ra
di
br
x
en
ec
is
 3.
a
<= BR> 3.
a
ex


ia
 1.
75


33




21
------=_NextPart_000_0054_01C5B89D.94750380-- From majordomo@mil.doit.wisc.edu Wed Sep 14 08:04:21 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFVzv-000858-78 for ipfix-archive@megatron.ietf.org; Wed, 14 Sep 2005 08:04:21 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA06560 for ; Wed, 14 Sep 2005 08:04:09 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EFVdz-0003Rn-00 for ipfix-list@mil.doit.wisc.edu; Wed, 14 Sep 2005 06:41:39 -0500 Received: from kyoto.netlab.nec.de ([195.37.70.21]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EFVdx-0003Rg-00 for ipfix-info@net.doit.wisc.edu; Wed, 14 Sep 2005 06:41:37 -0500 Received: from [10.1.1.171] (mito.netlab.nec.de [195.37.70.39]) by kyoto.netlab.nec.de (Postfix) with ESMTP id 968DF1BAC4D; Wed, 14 Sep 2005 13:41:36 +0200 (CEST) Date: Wed, 14 Sep 2005 13:41:43 +0200 From: Juergen Quittek To: Benoit Claise , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] headerLengthIPv4 editorial change Message-ID: In-Reply-To: <4326F5F2.5050107@cisco.com> References: <4326F5F2.5050107@cisco.com> X-Mailer: Mulberry/3.1.6 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Dear all, It is fine having an IE with unit "4 octets" using IE idenitfier #207. Still, it is potentially confusing and a potential source of errors that all our length indicators use "octet" except this one. We anyway have a gap of 3 unused IE idenitfiers just before #207: > | 160 | systemInitTimeMilliSeconds| 201 | mplsLabelStackSize | > | 161 | flowDurationMilliSeconds | 202 | mplsLabelStackDepth | > | 162 | flowDurationMicroSeconds | 203 | mplsTopLabelExp | > | 163 | observedFlowTotalCount | 204 | | > | 164 | ignoredPacketTotalCount | 205 | | > | 165 | ignoredOctetTotalCount | 206 | | > | 166 | notSentFlowTotalCount | 207 | headerLengthIPv4 | > | 167 | notSentPacketTotalCount | 208 | ipv4Options | > | 168 | notSentOctetTotalCount | 209 | tcpOptions | > | | | 210 | paddingOctets | So what about changing the IE identifier of the already specified IE headerLengthIPv4 from #207 to #206 and using #207 for the IE as specified by Benoit: > | 160 | systemInitTimeMilliSeconds| 201 | mplsLabelStackSize | > | 161 | flowDurationMilliSeconds | 202 | mplsLabelStackDepth | > | 162 | flowDurationMicroSeconds | 203 | mplsTopLabelExp | > | 163 | observedFlowTotalCount | 204 | | > | 164 | ignoredPacketTotalCount | 205 | | > | 165 | ignoredOctetTotalCount | 206 | headerLengthIPv4 | > | 166 | notSentFlowTotalCount | 207 | ipv4InternetHeaderLength | > | 167 | notSentPacketTotalCount | 208 | ipv4Options | > | 168 | notSentOctetTotalCount | 209 | tcpOptions | > | | | 210 | paddingOctets | This would reduce our gap in IE numbering and it would offer implementers both choices, the common unit "octet" and the special one "4 octets" that matches the second nibble of the IPv4 header. Thanks, Juergen -- Juergen Quittek quittek@netlab.nec.de Tel: +49 6221 90511-15 NEC Europe Ltd., Network Laboratories Fax: +49 6221 90511-55 Kurfuersten-Anlage 36, 69115 Heidelberg, Germany http://www.netlab.nec.de --On 9/13/2005 5:53 PM +0200 Benoit Claise wrote: > > Dear all, > > Juergen just posted a new version of the IPFIX-INFO. > However, a small editorial change has been agreed upon with Juergen by phone. > This email is for tracking purposes. IMHO, as this change is minor, > the current IPFIX-INFO version is fine for the IESG > review, but Dave and Nevil are the ones to decide. > > The headerLengthIPv4 I.E. will be changed to > > 5.3.29 IPv4InternetHeaderLength > > Description: > The length of the IPv4 header, as reported in the Internet Header Length (IHL) as specified in RFC 791 > Abstract Data Type: octet > ElementId: 207 > Status: current > Units: 4 octets > Reference: > See RFC 791 for the specification of the IPv4 header. > > > > Note that: > - the units are now 4 octets, as in the IHL. > - the ElementId is unchanged. > - if headerLengthIPv4 is needed with an unit of octets, we might define a new I.E. > > Regards, Benoit. > > > -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From jimiqcom@tricelcorp.com Thu Sep 15 03:22:07 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFo4N-0000pw-BD for ipfix-archive@megatron.ietf.org; Thu, 15 Sep 2005 03:22:07 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA23955 for ; Thu, 15 Sep 2005 03:22:05 -0400 (EDT) Received: from [220.163.112.162] (helo=tricelcorp.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EFnlv-0000vn-00 for ipfix-list@mil.doit.wisc.edu; Thu, 15 Sep 2005 02:03:04 -0500 Received: from [192.168.151.85] (helo=idealist) by tricelcorp.com with smtp (Eleven tn 4.19 (Isabel)) id HvJklb-BgPtVr-Vl for ipfix-list@mil.doit.wisc.edu; Thu, 15 Sep 2005 02:02:53 -0500 Message-ID: <002f01c5b9c3$7acddc00$5597a8c0@idealist> Reply-To: "Jimi Compo" From: "Jimi Compo" To: "Aspen Ostendorf" Subject: Re: Another proposal Pharm aceutical Date: Thu, 15 Sep 2005 02:02:48 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_002C_01C5B999.91F7D400" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?220.163.112.162 This is a multi-part message in MIME format. ------=_NextPart_000_002C_01C5B999.91F7D400 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable AmVa= XaLeCiVi bilinavialag enumxtrisra &nbs= p;a $3$1$3 75.21.33 Our Website FaBeToEa st st talsy DeliPric C= onOrde veryesfiderin= g nti ality with women, dont do devil a thing, and cant do anything, because they = bewilderment. A mad German has turned up, or just went crazy at the Ponds. ------=_NextPart_000_002C_01C5B999.91F7D400 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Am
Va
= Xa
Le
Ci
Vi
bi
li
na<= BR>vi
al
ag
en
um
xtr
is
ra
 
 
&nbs= p;
a
 
 

$3

$1
$3

.75

<= BR>.21
.33
 
 
Fa
Be
To
Ea<= /FONT>
st 
st <= BR>tal
sy 
Deli
Pric
 C= on
Orde
very
es
fide
rin= g


nti


ality
<= /DIV>
 
------=_NextPart_000_002C_01C5B999.91F7D400-- From majordomo@mil.doit.wisc.edu Thu Sep 15 08:46:56 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFt8d-0001oD-CC for ipfix-archive@megatron.ietf.org; Thu, 15 Sep 2005 08:46:55 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA08138 for ; Thu, 15 Sep 2005 08:46:49 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EFsyZ-0005rw-00 for ipfix-list@mil.doit.wisc.edu; Thu, 15 Sep 2005 07:36:27 -0500 Received: from mailhub.fokus.fraunhofer.de ([193.174.154.14]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EFsyY-0005rq-00 for ipfix-info@net.doit.wisc.edu; Thu, 15 Sep 2005 07:36:26 -0500 Received: from [10.147.65.153] (luz@kaitos [10.147.65.153]) by mailhub.fokus.fraunhofer.de (8.11.6p2/8.11.6) with ESMTP id j8FCaPU12637 for ; Thu, 15 Sep 2005 14:36:25 +0200 (MEST) Message-ID: <43296AC8.6050107@fokus.fraunhofer.de> Date: Thu, 15 Sep 2005 14:36:24 +0200 From: Lutz Mark User-Agent: Debian Thunderbird 1.0.6 (X11/20050802) X-Accept-Language: en-us, en MIME-Version: 1.0 To: ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Dear all, I'd like to change the description of the FlowID I.E. (148) old: An identifier of a Flow that is locally unique to an Exporting Process. Typically, this Information Element is used for limiting the scope of other Information Elements. new: An identifier of a Flow that is unique within an observation domain and its scope. Typically, this Information Element is used to differ different flows when the flow details are irrelevant or the flow details are exported in a different template. One motivation for the IE was our per-packet-export draft, which we have extended since that time. Best regards, Lutz -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From partoothibaul@korcham.net Thu Sep 15 15:29:56 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFzQi-0003Du-2A for ipfix-archive@megatron.ietf.org; Thu, 15 Sep 2005 15:29:56 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA29861 for ; Thu, 15 Sep 2005 15:29:52 -0400 (EDT) Received: from p3177-ipad507marunouchi.tokyo.ocn.ne.jp ([222.148.82.177] helo=korcham.net) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EFz3T-00007u-00 for ipfix-list@mil.doit.wisc.edu; Thu, 15 Sep 2005 14:05:56 -0500 Received: from [192.168.164.163] (helo=musical) by korcham.net with smtp (Geneva nm 2.90 (Hinduism)) id rOEUid-atXEuP-CY for ipfix-list@mil.doit.wisc.edu; Thu, 15 Sep 2005 14:05:53 -0500 Message-ID: <004d01c5ba28$7b4c8e00$a3a4a8c0@musical> Reply-To: "Thibault Parton" From: "Thibault Parton" To: "Fabio Milford" Subject: Re: V and many other Date: Thu, 15 Sep 2005 14:05:48 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_004A_01C5B9FE.92768600" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?222.148.82.177 This is a multi-part message in MIME format. ------=_NextPart_000_004A_01C5B9FE.92768600 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable CiLeAmViPrCeVaXaMeUl alvibiagoplelina= ritr istraenraeciabrex= umxdiaam $1 $3&nbs= p;$3 21.33.75 http://www.intvideogam.com Turning after he passed the tower, Judas saw that = in the terrible convinced that you are very intelligent. Ill set you at ease. = He is of a ------=_NextPart_000_004A_01C5B9FE.92768600 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Ci
Le
Am
Vi
Pr
Ce
Va<= BR>Xa
Me
Ul
al
vi
bi
ag
op
le
li
na=
ri
tr
is
tra
en
ra
ecia
brex
= um
x
dia
am
 $1


 $3


&nbs= p;$3


.21


.33


.75


<= /DIV>
 
------=_NextPart_000_004A_01C5B9FE.92768600-- From majordomo@mil.doit.wisc.edu Fri Sep 16 04:20:37 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGBSX-0004es-73 for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 04:20:37 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA01903 for ; Fri, 16 Sep 2005 04:20:34 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGB7R-0000qZ-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 02:58:49 -0500 Received: from kyoto.netlab.nec.de ([195.37.70.21]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGB7Q-0000qU-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 02:58:48 -0500 Received: from [10.1.1.171] (mito.netlab.nec.de [195.37.70.39]) by kyoto.netlab.nec.de (Postfix) with ESMTP id A31B51BAC4D; Fri, 16 Sep 2005 09:58:47 +0200 (CEST) Date: Fri, 16 Sep 2005 09:58:57 +0200 From: Juergen Quittek To: Lutz Mark , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model Message-ID: <4809D4E65E9C571E6EC44D9F@[10.1.1.171]> In-Reply-To: <43296AC8.6050107@fokus.fraunhofer.de> References: <43296AC8.6050107@fokus.fraunhofer.de> X-Mailer: Mulberry/3.1.6 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Lutz, As far as I understand you want to change the scope if the flowID from "per Exporting Process" to "per Observation Domain". Thus an Exporting Process reporting on more than one observation domain could re-use a flowID value in different Observation Domains. Correct? Thanks, Juergen --On 9/15/2005 2:36 PM +0200 Lutz Mark wrote: > > > Dear all, > > I'd like to change the description of the FlowID I.E. (148) > > old: > An identifier of a Flow that is locally unique to an Exporting > Process. Typically, this Information Element is used for limiting > the scope of other Information Elements. > > new: > An identifier of a Flow that is unique within an observation > domain and its scope. > Typically, this Information Element is used to differ > different flows when the flow details are irrelevant or > the flow details are exported in a different template. > > One motivation for the IE was our per-packet-export draft, > which we have extended since that time. > > Best regards, > Lutz > > > -- > Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say > "unsubscribe ipfix" in message body > Archive http://ipfix.doit.wisc.edu/archive/ -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 05:00:29 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGC57-0005Kj-4E for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 05:00:29 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA03156 for ; Fri, 16 Sep 2005 05:00:26 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGBvP-0003GU-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 03:50:27 -0500 Received: from smtp0.netlab.nec.de ([195.37.70.40]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGBvO-0003GO-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 03:50:26 -0500 Received: from venus.office (ftp.netlab.nec.de [10.1.1.25]) by smtp0.netlab.nec.de (Postfix) with ESMTP id 33895D9F2; Fri, 16 Sep 2005 10:50:25 +0200 (CEST) Received: from 10.1.1.203 ([10.1.1.203]) by venus.office ([10.1.1.25]) with Microsoft Exchange Server HTTP-DAV ; Fri, 16 Sep 2005 08:50:24 +0000 MIME-Version: 1.0 Received: from n-dietz by venus.office; 16 Sep 2005 08:50:20 +0000 Content-Type: multipart/signed; micalg=sha1; protocol="application/x-pkcs7-signature"; boundary="=-d2LdNPdzMgibiX7raOmB" X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message Subject: Re: [ipfix-info] new version of IPFIX info model Date: Fri, 16 Sep 2005 10:49:20 +0200 Message-ID: <1126860560.7886.6.camel@n-dietz.office> X-MS-Has-Attach: yes Thread-Topic: [ipfix-info] new version of IPFIX info model Thread-Index: AcW6m63On3VA8V3GTlGdV3McZOe22g== From: "Thomas Dietz" To: "Juergen Quittek" Cc: "Lutz Mark" , Precedence: bulk Sender: majordomo listserver --=-d2LdNPdzMgibiX7raOmB Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable J=C3=BCrgen, Lutz, I guess the wording is a bit missleading. An Observation Domain can be a scope, so maybe it should read An identifier of a Flow that is unique within an observation domain. This Information Element differs different flows when the flow details like IP Address, Protocol or Port are not of intrest or these flow details are exported in a different template. I hope this is clearer and still matches your suggestion Lutz. Regards, Thomas On Fri, 2005-09-16 at 09:58 +0200, Juergen Quittek wrote: > Lutz, >=20 > As far as I understand you want to change the scope if the flowID > from "per Exporting Process" to "per Observation Domain". > Thus an Exporting Process reporting on more than one observation > domain could re-use a flowID value in different Observation Domains. > Correct? >=20 > Thanks, >=20 > Juergen >=20 > --On 9/15/2005 2:36 PM +0200 Lutz Mark wrote: >=20 > > > > > > Dear all, > > > > I'd like to change the description of the FlowID I.E. (148) > > > > old: > > An identifier of a Flow that is locally unique to an Exporting > > Process. Typically, this Information Element is used for limiting > > the scope of other Information Elements. > > > > new: > > An identifier of a Flow that is unique within an observation > > domain and its scope. > > Typically, this Information Element is used to differ > > different flows when the flow details are irrelevant or > > the flow details are exported in a different template. > > > > One motivation for the IE was our per-packet-export draft, > > which we have extended since that time. > > > > Best regards, > > Lutz > > > > > > -- > > Help mailto:majordomo@net.doit.wisc.edu and say "help" in messag= e body > > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say > > "unsubscribe ipfix" in message body > > Archive http://ipfix.doit.wisc.edu/archive/ >=20 >=20 >=20 > -- > Help mailto:majordomo@net.doit.wisc.edu and say "help" in message = body > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say > "unsubscribe ipfix" in message body > Archive http://ipfix.doit.wisc.edu/archive/ --=-d2LdNPdzMgibiX7raOmB Content-Type: application/x-pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJOzCCAvgw ggJhoAMCAQICAw9RdTANBgkqhkiG9w0BAQQFADBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhh d3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt YWlsIElzc3VpbmcgQ0EwHhcNMDUwODE3MDkwOTE3WhcNMDYwODE3MDkwOTE3WjBjMQ4wDAYDVQQE EwVEaWV0ejEPMA0GA1UEKhMGVGhvbWFzMRUwEwYDVQQDEwxUaG9tYXMgRGlldHoxKTAnBgkqhkiG 9w0BCQEWGlRob21hcy5EaWV0ekBuZXRsYWIubmVjLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA4nhGGaCtAFl95e262kXtWs33/Co8wu3qnQqpmgEkgADwZV1ZGoNphSGYXWmdAO4S C+M2HFzsJ0FJ3eG4KV0IaI+kvuKQdfHbqKSV8OfUTIhwrzjwZVJBvUYagIBF8ksvo37XR8YPg5Hw j/zPFAbRhbGg/mrKj/Za7/P9ouv1onhwigQtOG5qcr3+MHE+I6lmkZM7FrzzNwYSJ0Jq52Q8BUEg LWdhLHnXDFy1d+tCZdtdEK3bKga13+Udc5jC0Yvg8hmY+nrxhUPKcYR038q404eJplla2qtpEC3O IoGTKLYRtcxAtoMQ1VG32AylLKJ59/GQDqXOjr9iCI4qyyj7zwIDAQABozcwNTAlBgNVHREEHjAc gRpUaG9tYXMuRGlldHpAbmV0bGFiLm5lYy5kZTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUA A4GBAE2PK+6rLfxJ5o+m3N28Uj0XGeArIfvLtnzZQDvuzz2jaThTjJ7PqULqOzjPsCGT/UsT2Ayo 2ksMnxzcVVIK4iJJlaJ2qJRrORakM2CfmkaxFkrJweezRfMPSp7tlW8QnZ/Johw746jZj5bcnOsV 0gxcXkhfMr9OcjEVsJ6+2eg6MIIC+DCCAmGgAwIBAgIDD1F1MA0GCSqGSIb3DQEBBAUAMGIxCzAJ BgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQD EyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTAeFw0wNTA4MTcwOTA5MTdaFw0w NjA4MTcwOTA5MTdaMGMxDjAMBgNVBAQTBURpZXR6MQ8wDQYDVQQqEwZUaG9tYXMxFTATBgNVBAMT DFRob21hcyBEaWV0ejEpMCcGCSqGSIb3DQEJARYaVGhvbWFzLkRpZXR6QG5ldGxhYi5uZWMuZGUw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieEYZoK0AWX3l7braRe1azff8KjzC7eqd CqmaASSAAPBlXVkag2mFIZhdaZ0A7hIL4zYcXOwnQUnd4bgpXQhoj6S+4pB18duopJXw59RMiHCv OPBlUkG9RhqAgEXySy+jftdHxg+DkfCP/M8UBtGFsaD+asqP9lrv8/2i6/WieHCKBC04bmpyvf4w cT4jqWaRkzsWvPM3BhInQmrnZDwFQSAtZ2EsedcMXLV360Jl210QrdsqBrXf5R1zmMLRi+DyGZj6 evGFQ8pxhHTfyrjTh4mmWVraq2kQLc4igZMothG1zEC2gxDVUbfYDKUsonn38ZAOpc6Ov2IIjirL KPvPAgMBAAGjNzA1MCUGA1UdEQQeMByBGlRob21hcy5EaWV0ekBuZXRsYWIubmVjLmRlMAwGA1Ud EwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEATY8r7qst/Enmj6bc3bxSPRcZ4Csh+8u2fNlAO+7P PaNpOFOMns+pQuo7OM+wIZP9SxPYDKjaSwyfHNxVUgriIkmVonaolGs5FqQzYJ+aRrEWSsnB57NF 8w9Knu2VbxCdn8miHDvjqNmPltyc6xXSDFxeSF8yv05yMRWwnr7Z6DowggM/MIICqKADAgECAgEN MA0GCSqGSIb3DQEBBQUAMIHRMQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBDYXBlMRIw EAYDVQQHEwlDYXBlIFRvd24xGjAYBgNVBAoTEVRoYXd0ZSBDb25zdWx0aW5nMSgwJgYDVQQLEx9D ZXJ0aWZpY2F0aW9uIFNlcnZpY2VzIERpdmlzaW9uMSQwIgYDVQQDExtUaGF3dGUgUGVyc29uYWwg RnJlZW1haWwgQ0ExKzApBgkqhkiG9w0BCQEWHHBlcnNvbmFsLWZyZWVtYWlsQHRoYXd0ZS5jb20w HhcNMDMwNzE3MDAwMDAwWhcNMTMwNzE2MjM1OTU5WjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMc VGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZy ZWVtYWlsIElzc3VpbmcgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMSmPFVzVftOucqZ Wh5owHUEcJ3f6f+jHuy9zfVb8hp2vX8MOmHyv1HOAdTlUAow1wJjWiyJFXCO3cnwK4Vaqj9xVsuv PAsH5/EfkTYkKhPPK9Xzgnc9A74r/rsYPge/QIACZNenprufZdHFKlSFD0gEf6e20TxhBEAeZBly YLf7AgMBAAGjgZQwgZEwEgYDVR0TAQH/BAgwBgEB/wIBADBDBgNVHR8EPDA6MDigNqA0hjJodHRw Oi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlUGVyc29uYWxGcmVlbWFpbENBLmNybDALBgNVHQ8EBAMC AQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVMYWJlbDItMTM4MA0GCSqGSIb3DQEB BQUAA4GBAEiM0VCD6gsuzA2jZqxnD3+vrL7CF6FDlpSdf0whuPg2H6otnzYvwPQcUCCTcDz9reFh YsPZOhl+hLGZGwDFGguCdJ4lUJRix9sncVcljd2pnDmOjCBPZV+V2vf3h9bGCE6u9uo05RAaWzVN d+NWIXiC3CEZNd4ksdMdRv9dX2VPMYIC5zCCAuMCAQEwaTBiMQswCQYDVQQGEwJaQTElMCMGA1UE ChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFs IEZyZWVtYWlsIElzc3VpbmcgQ0ECAw9RdTAJBgUrDgMCGgUAoIIBUzAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wNTA5MTYwODQ5MDZaMCMGCSqGSIb3DQEJBDEWBBSw q44Dvsjxg9Fhnyn+2fds6DiN6DB4BgkrBgEEAYI3EAQxazBpMGIxCzAJBgNVBAYTAlpBMSUwIwYD VQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29u YWwgRnJlZW1haWwgSXNzdWluZyBDQQIDD1F1MHoGCyqGSIb3DQEJEAILMWugaTBiMQswCQYDVQQG EwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhh d3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECAw9RdTANBgkqhkiG9w0BAQEFAASCAQBB N+praZpMKkNsPjedEpYB7wMJwbwECQydv6iX02cLliz0NMbNoemrcVvjgvhaZn0Iv+UxwSoSkmGC MYa6xfJYfdQgxa45DvgUjnlBK2eEXJ1/rw5GMZVdzEwyuttYUeAWxy1ajaYB3iK9TptP5AhaRyxx 7DTr9jnFknemsjkjhq83+9TgtzKv+qN4Iis93RBuVFq0H6UU3j0Mb16CledMu8Qdf8Sj5bCzq1wN XEGGXozGPpTgEakb2K9S0zjeIC4E4Arp6g7iKfPkrhnyTtK2ZeZxOJrAKZ/1yzxUieR7Xt1voG7C 0ipjjVii71x3dgG/gAxOxJgV3SDFkx7EF7H0AAAAAAAA --=-d2LdNPdzMgibiX7raOmB-- -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 05:46:57 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGCo5-0007e4-5N for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 05:46:57 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA05173 for ; Fri, 16 Sep 2005 05:46:54 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGCjc-0005Xx-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 04:42:20 -0500 Received: from mailhub.fokus.fraunhofer.de ([193.174.154.14]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGCja-0005Xk-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 04:42:18 -0500 Received: from [10.147.65.153] (luz@kaitos [10.147.65.153]) by mailhub.fokus.fraunhofer.de (8.11.6p2/8.11.6) with ESMTP id j8G9gGU03077; Fri, 16 Sep 2005 11:42:16 +0200 (MEST) Message-ID: <432A9377.5070208@fokus.fraunhofer.de> Date: Fri, 16 Sep 2005 11:42:15 +0200 From: Lutz Mark User-Agent: Debian Thunderbird 1.0.6 (X11/20050802) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Thomas Dietz CC: Juergen Quittek , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model References: <1126860560.7886.6.camel@n-dietz.office> In-Reply-To: <1126860560.7886.6.camel@n-dietz.office> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Hi Thomas and Juergen, > I guess the wording is a bit missleading. An Observation Domain can be a > scope, so maybe it should read > > An identifier of a Flow that is unique within an observation > domain. This Information Element differs different flows when > the flow details like IP Address, Protocol or Port are not of > intrest or these flow details are exported in a different > template. > > I hope this is clearer and still matches your suggestion Lutz. thank you this sounds better. In addition i wondered if it makes sense to make the flowid unique only within its scope. If the scope for example ist the template. This allows the use of 2^32 FlowIDs per template. In my understanding the default scope of each exported IPFIX-data is the observation domain. One can further limit the scope via option records. Best Regards, Lutz -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 06:38:36 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGDc4-0004Xq-8d for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 06:38:36 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA07807 for ; Fri, 16 Sep 2005 06:38:33 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGDW8-0001H5-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 05:32:28 -0500 Received: from ams-iport-1.cisco.com ([144.254.224.140]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGDW6-0001GB-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 05:32:27 -0500 Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 16 Sep 2005 12:32:26 +0200 Received: from cisco.com (mrwint.cisco.com [64.103.71.48]) by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j8GAWNVP019637; Fri, 16 Sep 2005 12:32:24 +0200 (MEST) Received: from [10.61.66.15] (ams-clip-vpn-dhcp527.cisco.com [10.61.66.15]) by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id LAA05322; Fri, 16 Sep 2005 11:32:20 +0100 (BST) Message-ID: <432A9F9A.1010706@cisco.com> Date: Fri, 16 Sep 2005 11:34:02 +0100 From: Paul Aitken User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.7.8) Gecko/20050603 Fedora/1.7.8-1.2.1.legacy X-Accept-Language: en-gb, en-us MIME-Version: 1.0 To: Lutz Mark CC: Thomas Dietz , Juergen Quittek , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model -- FlowID References: <1126860560.7886.6.camel@n-dietz.office> <432A9377.5070208@fokus.fraunhofer.de> In-Reply-To: <432A9377.5070208@fokus.fraunhofer.de> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Lutz, Whatever the definition is, I'm wondering what happens when you eventually run out of FlowIDs? ie, how can a FlowID be removed from an old flow and be allocated to a new flow? Do FlowIDs have a certain lifetime inside which they cannot be reused? Or is there a clue that the FlowID is no longer in use or no longer valid? Or can we send a clue, ie a FlowID withdrawal message? Or perhaps information sent using scope = FlowID only applies to the most recently exported flow which contained that FlowID. But what if the exported flow was lost in transit (UDP) or is sent *after* the scoped info (different SCTP channel)? Cheers. -- Paul Aitken Cisco Systems Ltd, Edinburgh, Scotland. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 07:48:14 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGEhS-0005JY-KJ for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 07:48:14 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA10967 for ; Fri, 16 Sep 2005 07:48:12 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGEc0-0004Qn-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 06:42:36 -0500 Received: from mailhub.fokus.fraunhofer.de ([193.174.154.14]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGEbz-0004Qi-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 06:42:35 -0500 Received: from [10.147.65.153] (luz@kaitos [10.147.65.153]) by mailhub.fokus.fraunhofer.de (8.11.6p2/8.11.6) with ESMTP id j8GBgCU27267; Fri, 16 Sep 2005 13:42:12 +0200 (MEST) Message-ID: <432AAF94.3080008@fokus.fraunhofer.de> Date: Fri, 16 Sep 2005 13:42:12 +0200 From: Lutz Mark User-Agent: Debian Thunderbird 1.0.6 (X11/20050802) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Paul Aitken CC: ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model -- FlowID References: <1126860560.7886.6.camel@n-dietz.office> <432A9377.5070208@fokus.fraunhofer.de> <432A9F9A.1010706@cisco.com> In-Reply-To: <432A9F9A.1010706@cisco.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Hi Paul, I think at this time we only need the definion. > Whatever the definition is, I'm wondering what happens when you > eventually run out of FlowIDs? > > ie, how can a FlowID be removed from an old flow and be allocated to a > new flow? > > Do FlowIDs have a certain lifetime inside which they cannot be reused? > Or is there a clue that the FlowID is no longer in use or no longer > valid? Or can we send a clue, ie a FlowID withdrawal message? > > Or perhaps information sent using scope = FlowID only applies to the > most recently exported flow which contained that FlowID. But what if the > exported flow was lost in transit (UDP) or is sent *after* the scoped > info (different SCTP channel)? good points. In our per-packet-export draft we suggested to handle the flowID management similar to the IPFIX template management. Maybe we can pick up this issue in the ipfix implementation guidelines? Best regards, Lutz -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 08:34:05 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGFPp-0008JI-1S for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 08:34:05 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA13836 for ; Fri, 16 Sep 2005 08:34:03 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGFKn-0006Ni-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 07:28:53 -0500 Received: from ams-iport-1.cisco.com ([144.254.224.140]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGFKm-0006Nd-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 07:28:52 -0500 Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 16 Sep 2005 14:28:52 +0200 Received: from cisco.com (mrwint.cisco.com [64.103.71.48]) by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j8GCSnVP020033; Fri, 16 Sep 2005 14:28:49 +0200 (MEST) Received: from [10.61.66.15] (ams-clip-vpn-dhcp527.cisco.com [10.61.66.15]) by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id NAA15506; Fri, 16 Sep 2005 13:28:48 +0100 (BST) Message-ID: <432ABAE9.3020903@cisco.com> Date: Fri, 16 Sep 2005 13:30:33 +0100 From: Paul Aitken User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.7.8) Gecko/20050603 Fedora/1.7.8-1.2.1.legacy X-Accept-Language: en-gb, en-us MIME-Version: 1.0 To: Lutz Mark CC: ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model -- FlowID References: <1126860560.7886.6.camel@n-dietz.office> <432A9377.5070208@fokus.fraunhofer.de> <432A9F9A.1010706@cisco.com> <432AAF94.3080008@fokus.fraunhofer.de> In-Reply-To: <432AAF94.3080008@fokus.fraunhofer.de> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Lutz, > I think at this time we only need the definion. Perhaps so - but even when we're defining the object, we must have some idea how it will be used. > In our per-packet-export draft we suggested to handle the flowID > management similar to the IPFIX template management. Well, firstly you're probably going to need a lot less template ID's than flow ID's (unless you export unique templates for each flow!). That's reflected in the fact the the template IDs are 16 bit numbers, while the flow IDs are 32 bits. Secondly, exhaustion of the available template IDs was envisaged some time ago, so now we have the template withdrawal message which allows template IDs to be reused. But there's no such mechanism for flow IDs. Just to put the issue in perspective: if you're allocating an ID to each flow, then at just 1000 flows/sec, 2^32 IDs will be consumed in 49.7 days. Or, any more than 136 flows/sec means you'll consume your 2^32 IDs in one year. > Maybe we can pick up this issue in the ipfix implementation > guidelines? Rather, if there's to be a similar mechanism for re-using flow IDs (or IDs in general) then it needs to be written in to the protocol draft. It cannot be left for each individual implimentor to decide on their own scheme. Cheers. -- Paul Aitken Cisco Systems Ltd, Edinburgh, Scotland. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 08:46:08 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGFbQ-0002lr-67 for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 08:46:08 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA14217 for ; Fri, 16 Sep 2005 08:46:02 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGFUT-00075H-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 07:38:53 -0500 Received: from tik6.ethz.ch ([129.132.119.136]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGFUS-00075C-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 07:38:52 -0500 Received: from [82.130.102.210] (nb-4995.ethz.ch [82.130.102.210]) by tik6.ethz.ch (Postfix) with ESMTP id 086AE6ADA3; Fri, 16 Sep 2005 14:38:50 +0200 (MEST) Message-ID: <432ABE81.9070607@fokus.fraunhofer.de> Date: Fri, 16 Sep 2005 14:45:53 +0200 From: Elisa Boschi User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Paul Aitken Cc: Lutz Mark , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model -- FlowID References: <1126860560.7886.6.camel@n-dietz.office> <432A9377.5070208@fokus.fraunhofer.de> <432A9F9A.1010706@cisco.com> <432AAF94.3080008@fokus.fraunhofer.de> <432ABAE9.3020903@cisco.com> In-Reply-To: <432ABAE9.3020903@cisco.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Paul, Lutz, > >> Maybe we can pick up this issue in the ipfix implementation guidelines? > > > Rather, if there's to be a similar mechanism for re-using flow IDs (or > IDs in general) then it needs to be written in to the protocol draft. It > cannot be left for each individual implimentor to decide on their own > scheme. > I would rather propose to describe the mechanism in the per-packet-export draft. It is there, that we have used the Flow IDs first. No mention of FlowIDs appears in the protocol draft... cheers, Elisa -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 13:07:16 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGJgB-00051O-Sx for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 13:07:16 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA29514 for ; Fri, 16 Sep 2005 13:07:12 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGJMX-00054f-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 11:46:57 -0500 Received: from mailhub.lawrence.edu ([143.44.0.14] helo=lawrence.edu) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGJMW-00054a-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 11:46:56 -0500 Received: from [143.44.160.16] (account lower HELO [127.0.0.1]) by lawrence.edu (CommuniGate Pro SMTP 4.3.5) with ESMTPA id 11856256; Fri, 16 Sep 2005 11:46:46 -0500 Message-ID: <432AF715.7040504@lawrence.edu> Date: Fri, 16 Sep 2005 11:47:17 -0500 From: Robert Lowe Organization: Lawrence University User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Lutz Mark CC: Thomas Dietz , Juergen Quittek , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model References: <1126860560.7886.6.camel@n-dietz.office> <432A9377.5070208@fokus.fraunhofer.de> In-Reply-To: <432A9377.5070208@fokus.fraunhofer.de> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Just a couple of phrasing suggestions/corrections... provided this change is to find its way into some draft. -Robert >> I guess the wording is a bit missleading. An Observation Domain can be a >> scope, so maybe it should read >> >> An identifier of a Flow that is unique within an observation >> domain. This Information Element differs different flows when ^^^^^^^^^^^^^^^^^ distinguishes between different (is used to distinguish between different) -OR- differentiates separate, distinct (is used to differentiate separate, distinct) >> the flow details like IP Address, Protocol or Port are not of >> intrest or these flow details are exported in a different ^^^^^^^ interest, >> template. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Fri Sep 16 20:39:12 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGQjW-00058l-DG for ipfix-archive@megatron.ietf.org; Fri, 16 Sep 2005 20:39:12 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA29370 for ; Fri, 16 Sep 2005 20:39:08 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EGQd6-0003pu-00 for ipfix-list@mil.doit.wisc.edu; Fri, 16 Sep 2005 19:32:32 -0500 Received: from imo-d06.mx.aol.com ([205.188.157.38]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EGQd4-0003p4-00 for ipfix-info@net.doit.wisc.edu; Fri, 16 Sep 2005 19:32:30 -0500 Received: from gtcubed@aim.com by imo-d06.mx.aol.com (mail_out_v38_r5.5.) id 4.1a1.3c20fefc (57874) for ; Fri, 16 Sep 2005 20:32:29 -0400 (EDT) Received: from mblk-d10 (mblk-d10.mblk.aol.com [205.188.149.2]) by air-ia02.mx.aol.com (v107.10) with ESMTP id MAILINIA24-e212432b641c347; Fri, 16 Sep 2005 20:32:28 -0400 Date: Fri, 16 Sep 2005 20:32:28 -0400 From: gtcubed@aim.com Message-Id: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> X-MB-Message-Source: WebUI X-MB-Message-Type: User Received: from 63.87.1.107 by mblk-d10.sysops.aol.com (205.188.149.2) with HTTP (WebMailUI); Fri, 16 Sep 2005 20:32:28 -0400 X-Mailer: AIM WebMail 1.1.0.13964 Subject: [ipfix-info] Observation Point and Traffic Direction Content-Type: text/plain; charset="us-ascii"; format=flowed MIME-Version: 1.0 To: ipfix-info@net.doit.wisc.edu X-AOL-IP: 205.188.149.2 X-Spam-Flag: NO Precedence: bulk Sender: majordomo listserver Hi I need a quick clarification regarding IPFIX terminology. If the observation point is defined to be an interface such as int Gig 1/1. Does the metering process capture ingress packets, egress packets or both? Or is the traffic direction explicitly specified. Thanks in advance. ________________________________________________________________________ Check Out the new free AIM(R) Mail -- 2 GB of storage and industry-leading spam and email virus protection. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From deyzsiga@forethought.com Sat Sep 17 22:51:48 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EGpHQ-00024S-Oe for ipfix-archive@megatron.ietf.org; Sat, 17 Sep 2005 22:51:48 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA17018 for ; Sat, 17 Sep 2005 22:51:46 -0400 (EDT) Received: from [218.95.92.89] (helo=forethought.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EGoun-0006CP-00 for ipfix-list@mil.doit.wisc.edu; Sat, 17 Sep 2005 21:28:25 -0500 Received: from [192.168.82.75] (helo=moonhead) by forethought.com with smtp (Drawer xm 3.72 (Scrimmage)) id vsKMMI-XDAGcb-JH for ipfix-list@mil.doit.wisc.edu; Sat, 17 Sep 2005 21:28:16 -0500 Message-ID: <005701c5bbf8$9d950600$4b52a8c0@moonhead> Reply-To: "Zsiga Deyoe" From: "Zsiga Deyoe" To: "Ione Quast" Subject: Re: Good Da y Date: Sat, 17 Sep 2005 21:28:12 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0054_01C5BBCE.B4BEFE00" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_0054_01C5BBCE.B4BEFE00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable ViCeAmXaLePrUlC= iMeVa aglebinavioptralrili rabrexenxtraeciaamisdiaum $3 $= 1 $3 33.21.75 http://www.rosetionoff.c= om thirties, while at work on his own novel. Without any preliminaries, he = concocted a gloomy face, knitted his ------=_NextPart_000_0054_01C5BBCE.B4BEFE00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
 ------=_NextPart_000_0054_01C5BBCE.B4BEFE00-- From basil@ac.upc.es Sun Sep 18 16:24:53 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EH5iX-0000OR-O1 for ipfix-archive@megatron.ietf.org; Sun, 18 Sep 2005 16:24:53 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA23675 for ; Sun, 18 Sep 2005 16:24:51 -0400 (EDT) Received: from [201.250.56.139] (helo=201.250.56.139) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EH5R8-0002bv-00 for ipfix-list@mil.doit.wisc.edu; Sun, 18 Sep 2005 15:06:59 -0500 Message-ID: <3ed001c5bc8b$894b607c$c7f8d8e0@ac.upc.es> From: "Paul A. Davis" To: ipfix-list@mil.doit.wisc.edu Subject: =?iso-8859-1?B?VmlhZ3JhIC0gJDEuOTkvZG9zZQ==?= Date: Sun, 18 Sep 2005 19:59:18 +0000 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0000_FA9272FB.B857DCD5" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express V6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 This is a multi-part message in MIME format. ------=_NextPart_000_0000_FA9272FB.B857DCD5 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0001_62C05964.704E28C5" ------=_NextPart_001_0001_62C05964.704E28C5 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit VIAGRA http://www.pillsheaven.biz/vt/ Only $1.99/dose! ________________________________ To change your mail preferences, go here ________________________________ ------=_NextPart_001_0001_62C05964.704E28C5 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 7bit

VIAGRA
http://www.pillsheaven.biz/vt/

Only $1.99/dose!


________________________________
To change your mail preferences, go here
________________________________

------=_NextPart_001_0001_62C05964.704E28C5-- ------=_NextPart_000_0000_FA9272FB.B857DCD5-- From bonavewpfvgbqrmjunki@breakbeat.is Mon Sep 19 03:13:39 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHFqN-0001KP-8Z for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 03:13:39 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA03199 for ; Mon, 19 Sep 2005 03:13:37 -0400 (EDT) Received: from [201.230.122.175] (helo=breakbeat.is) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EHFYb-0005vt-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 01:55:18 -0500 Message-ID: <005701c5bce7$0eb2e700$7ce4a8c0@spiteful> Reply-To: "Bonaventure Junkins" From: "Bonaventure Junkins" To: "Jess Thome" Subject: Re: It Works Wonders Date: Mon, 19 Sep 2005 01:55:02 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0054_01C5BCBD.25DCDF00" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?201.230.122.175 This is a multi-part message in MIME format. ------=_NextPart_000_0054_01C5BCBD.25DCDF00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable VLCUMAPXCV AeIlemraeI LvAtrbonlA IiLriipa= eG UtIadeexbR MraSmiancia = rexA $3$1 = $3 75 .21 = 33 http://www.srechakam.com= I wait to hear the procurators orders, said the visitor, approaching It is = not known what Pelageya Antonovna imagined here, only she clasped ------=_NextPart_000_0054_01C5BCBD.25DCDF00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
V
L
C
U
M
A
P
X
CV
A
e
I
l
e
m
r
a
e<= BR>I
L
v
A
t
r
b
o
n
lA
I
i
L
r
i
i
p
a
= e
G
U
t
I
a
d
e
e
x
b<= BR>R
M
ra
S
m
ia
n
cia
=
rex
A
$3

$1




=

$3
.75

.21




=

.33
 
------=_NextPart_000_0054_01C5BCBD.25DCDF00-- From majordomo@mil.doit.wisc.edu Mon Sep 19 06:12:53 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHIdp-0004q6-9C for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 06:12:53 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA09863 for ; Mon, 19 Sep 2005 06:12:50 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EHIYg-0000EF-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 05:07:34 -0500 Received: from [203.196.196.74] (helo=BLR-MAIL.NETD.COM) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EHIYc-0000E2-00 for ipfix-info@net.doit.wisc.edu; Mon, 19 Sep 2005 05:07:33 -0500 Received: from [10.91.0.217] ([10.91.0.217]) by BLR-MAIL.NETD.COM (8.12.8/8.12.8) with ESMTP id j8JA9I8C021892; Mon, 19 Sep 2005 15:39:19 +0530 Subject: Re: [ipfix-info] Observation Point and Traffic Direction From: "Ganesh Prasad .M" Reply-To: mgprasad@netd.com To: gtcubed@aim.com Cc: ipfix-info@net.doit.wisc.edu In-Reply-To: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> References: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> Content-Type: text/plain Organization: Net Devices India Private Limited Message-Id: <1127124263.3692.7.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.2 (1.2.2-4) Date: 19 Sep 2005 15:34:23 +0530 Content-Transfer-Encoding: 7bit X-NetD-India-MailScanner-Information: Please contact the NetD-India Sysadmin for more information X-NetD-India-MailScanner: Found to be clean X-MailScanner-From: mgprasad@netd.com Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit If you look at the Cisco implementation, user can configure the NetFlow to capture traffic either in ingress/egress direction or both. In the older versions of Cisco CLIs user can only configure NetFlow in ingress direction. But I don't know what difference will it make (capturing at ingress from capturing at egress). On Sat, 2005-09-17 at 06:02, gtcubed@aim.com wrote: > Hi > > I need a quick clarification regarding IPFIX terminology. > > If the observation point is defined to be an interface such as > > int Gig 1/1. > > Does the metering process capture ingress packets, egress packets or > both? > > Or is the traffic direction explicitly specified. > > Thanks in advance. > ________________________________________________________________________ > Check Out the new free AIM(R) Mail -- 2 GB of storage and > industry-leading spam and email virus protection. > > > -- > Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say > "unsubscribe ipfix" in message body > Archive http://ipfix.doit.wisc.edu/archive/ -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Mon Sep 19 06:16:53 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHIhg-0005kI-UE for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 06:16:53 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA09995 for ; Mon, 19 Sep 2005 06:16:49 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EHIbu-0000IE-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 05:10:54 -0500 Received: from [203.196.196.74] (helo=BLR-MAIL.NETD.COM) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EHIbs-0000Hx-00 for ipfix-info@net.doit.wisc.edu; Mon, 19 Sep 2005 05:10:52 -0500 Received: from [10.91.0.217] ([10.91.0.217]) by BLR-MAIL.NETD.COM (8.12.8/8.12.8) with ESMTP id j8JABD8C022037; Mon, 19 Sep 2005 15:41:13 +0530 Subject: Re: [ipfix-info] Observation Point and Traffic Direction From: "Ganesh Prasad .M" Reply-To: mgprasad@netd.com To: gtcubed@aim.com Cc: ipfix-info@net.doit.wisc.edu In-Reply-To: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> References: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> Content-Type: text/plain Organization: Net Devices India Private Limited Message-Id: <1127124378.3692.9.camel@localhost.localdomain> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.2 (1.2.2-4) Date: 19 Sep 2005 15:36:19 +0530 Content-Transfer-Encoding: 7bit X-NetD-India-MailScanner-Information: Please contact the NetD-India Sysadmin for more information X-NetD-India-MailScanner: Found to be clean X-MailScanner-From: mgprasad@netd.com Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit If you look at the Cisco implementation, user can configure the NetFlow to capture traffic either in ingress/egress direction or both. In the older versions of Cisco CLIs user can only configure NetFlow in ingress direction. But I don't know what difference will it make (capturing at ingress from capturing at egress). With Warm Regards Ganesh On Sat, 2005-09-17 at 06:02, gtcubed@aim.com wrote: > Hi > > I need a quick clarification regarding IPFIX terminology. > > If the observation point is defined to be an interface such as > > int Gig 1/1. > > Does the metering process capture ingress packets, egress packets or > both? > > Or is the traffic direction explicitly specified. > > Thanks in advance. > ________________________________________________________________________ > Check Out the new free AIM(R) Mail -- 2 GB of storage and > industry-leading spam and email virus protection. > > > -- > Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say > "unsubscribe ipfix" in message body > Archive http://ipfix.doit.wisc.edu/archive/ -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From eBay@eBay.com Mon Sep 19 06:59:02 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHJMU-0006E0-GH for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 06:59:02 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA11842 for ; Mon, 19 Sep 2005 06:58:59 -0400 (EDT) Received: from up.doit.wisc.edu ([144.92.9.73] helo=smtp.doit.wisc.edu) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EHJ6B-0001vj-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 05:42:11 -0500 Received: from YahooBB219182240174.bbtec.net (YahooBB219182240174.bbtec.net [219.182.240.174]) by smtp.doit.wisc.edu (8.13.1/8.13.1) with SMTP id j8JAg8aa011308 for ; Mon, 19 Sep 2005 05:42:10 -0500 Received: from 219.182.240.174 (36.158.186.199) by mail.serviciocristiano.com (FirstClass Mail Server v7.1) with SMTP (Sender: eBay@eBay.com) transient id 1S[4]; Mon, 19 Sep 2005 16:37:09 +0500 Message-ID: From: "eBay@eBay.com" To: ipfix-list@mil.doit.wisc.edu Subject: Update Your Credit/Debit Card on Your eBay Account Date: Mon, 19 Sep 2005 10:41:09 -0100 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--k%5byh30375FO" ----k%5byh30375FO Content-Type: text/html; X-MIME-Autoconverted: from 8bit to quoted-printable by smtp.doit.wisc.edu id j8JAg8aa011308 Content-Transfer-Encoding: quoted-printable
3D"Register=20
3D"
3D"
3D""
Dear valued customer =3D"Need Help?3D"
3D"
We = regret to inform you that your eBay account could be suspended if you don= 't=20 re-update your account information. To resolve this problems please Click = Here=20 and re-enter your account information. If your problems could not be re= solved your account will be suspended for a period of 3-4 days, after=20 this period your account will be terminated.

=20 For the User Agreement, Section 9, we may immediately issue a warning, = temporarily suspend, indefinitely suspend or terminate your membership an= d refuse to provide our services to you if we believe that your actions m= ay cause financial loss or legal liability for you, our users or us. We m= ay also take these actions if we are unable to verify or authenticate any= information you provide to us.

Due to the suspension of this= account, please be advised you are prohibited from using eBay in any way= . This includes the registering of a new=20 account. Please note that this suspension does not relieve you of your = agreed-upon obligation to pay any fees you may owe to eBay.
<= STRONG>

Regards,Safeharbor Department eBay, Inc
The eBay team.
This is an automatic message. Pl= ease do not reply.




Copyright =A9 1995-2004 eBay I= nc. All Rights Reserved.
Designated trademarks and brands are the prop= erty of their respective owners.
Use of this Web site constitutes acce= ptance of the eBay User Agreement and Privacy Policy.
 3DTrustE

<= /DIV>
----k%5byh30375FO-- From majordomo@mil.doit.wisc.edu Mon Sep 19 11:21:55 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHNSq-00016e-PE for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 11:21:55 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA02760 for ; Mon, 19 Sep 2005 11:21:41 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EHNL9-0000AP-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 10:13:55 -0500 Received: from ams-iport-1.cisco.com ([144.254.224.140]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EHNL8-0000AJ-00 for ipfix-info@net.doit.wisc.edu; Mon, 19 Sep 2005 10:13:54 -0500 Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 19 Sep 2005 17:13:55 +0200 Received: from cisco.com (mrwint.cisco.com [64.103.71.48]) by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j8JFDoVP016977; Mon, 19 Sep 2005 17:13:51 +0200 (MEST) Received: from [10.61.80.62] (ams-clip-vpn-dhcp4159.cisco.com [10.61.80.62]) by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id QAA14639; Mon, 19 Sep 2005 16:13:39 +0100 (BST) Message-ID: <432ED5A3.9050501@cisco.com> Date: Mon, 19 Sep 2005 16:13:39 +0100 From: Paul Aitken User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.7.10) Gecko/20050811 Fedora/1.7.10-1.2.1.legacy X-Accept-Language: en-gb, en-us MIME-Version: 1.0 To: gtcubed@aim.com CC: ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] Observation Point and Traffic Direction References: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> In-Reply-To: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit gtcubed, > I need a quick clarification regarding IPFIX terminology. > > If the observation point is defined to be an interface such as > > int Gig 1/1. > > Does the metering process capture ingress packets, egress packets or both? > > Or is the traffic direction explicitly specified. A bidirectional interface is a rather vague observation "point". Apart from the direction issue, there's no indication whether the OP is before or after any processing - though one might assume an OP to be on the input traffic before processing. Break your interface (conceptually!) into input and output sides, so a simple device can be modelled as: X Y input ---> processing ---> output So the observation point can be at X on the input side or at Y on the output side (or both, or neither). The OP might even be in the midst of processing eg, reporting some internal processing statistics. Cheers. -- Paul Aitken Cisco Systems Ltd, Edinburgh, Scotland. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Mon Sep 19 11:23:45 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHNUf-00021A-8Z for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 11:23:45 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA02899 for ; Mon, 19 Sep 2005 11:23:42 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EHNNu-0000F0-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 10:16:46 -0500 Received: from ams-iport-1.cisco.com ([144.254.224.140]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EHNNt-0000Ev-00 for ipfix-info@net.doit.wisc.edu; Mon, 19 Sep 2005 10:16:45 -0500 Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 19 Sep 2005 17:16:44 +0200 Received: from cisco.com (mrwint.cisco.com [64.103.71.48]) by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j8JFGfVP017829; Mon, 19 Sep 2005 17:16:42 +0200 (MEST) Received: from [10.61.80.62] (ams-clip-vpn-dhcp4159.cisco.com [10.61.80.62]) by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id QAA15184; Mon, 19 Sep 2005 16:16:40 +0100 (BST) Message-ID: <432ED657.5060605@cisco.com> Date: Mon, 19 Sep 2005 16:16:39 +0100 From: Paul Aitken User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.7.10) Gecko/20050811 Fedora/1.7.10-1.2.1.legacy X-Accept-Language: en-gb, en-us MIME-Version: 1.0 To: mgprasad@netd.com CC: gtcubed@aim.com, ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] Observation Point and Traffic Direction References: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> <1127124263.3692.7.camel@localhost.localdomain> In-Reply-To: <1127124263.3692.7.camel@localhost.localdomain> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Ganesh, > But I don't know what difference will it make (capturing at ingress from > capturing at egress). With an egress observation point, you see the field values after they've been modified by the various features such as ToS remarking and NAT. -- Paul Aitken Cisco Systems Ltd, Edinburgh, Scotland. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Mon Sep 19 13:10:00 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHP9T-0006tb-JZ for ipfix-archive@megatron.ietf.org; Mon, 19 Sep 2005 13:09:59 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA07898 for ; Mon, 19 Sep 2005 13:09:55 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EHOtV-0006Oh-00 for ipfix-list@mil.doit.wisc.edu; Mon, 19 Sep 2005 11:53:29 -0500 Received: from imo-m19.mx.aol.com ([64.12.137.11]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EHOtT-0006Oc-00 for ipfix-info@net.doit.wisc.edu; Mon, 19 Sep 2005 11:53:27 -0500 Received: from gtcubed@aim.com by imo-m19.mx.aol.com (mail_out_v38_r5.5.) id c.be.316f8f8c (57872); Mon, 19 Sep 2005 12:51:52 -0400 (EDT) Received: from mblk-d27 (mblk-d27.mblk.aol.com [205.188.149.19]) by air-ia02.mx.aol.com (v107.10) with ESMTP id MAILINIA22-e210432eeca71c4; Mon, 19 Sep 2005 12:51:51 -0400 Content-Transfer-Encoding: quoted-printable Date: Mon, 19 Sep 2005 12:51:51 -0400 Message-Id: <8C78B5191875080-CA8-F9AC@mblk-d27.sysops.aol.com> From: gtcubed@aim.com References: <8C789366B438CCA-AB4-1616B@mblk-d10.sysops.aol.com> <432ED5A3.9050501@cisco.com> Cc: ipfix-info@net.doit.wisc.edu Received: from 63.87.1.107 by mblk-d27.sysops.aol.com (205.188.149.19) with HTTP (WebMailUI); Mon, 19 Sep 2005 12:51:51 -0400 X-MB-Message-Source: WebUI X-MB-Message-Type: User In-Reply-To: <432ED5A3.9050501@cisco.com> X-Mailer: AIM WebMail 1.1.0.13964 Subject: Re: [ipfix-info] Observation Point and Traffic Direction Content-Type: text/plain; charset="iso-8859-1"; format=flowed MIME-Version: 1.0 To: paitken@cisco.com X-AOL-IP: 205.188.149.19 X-Spam-Flag: NO Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: quoted-printable Thanks Paul, This clarifies it for me. -----Original Message----- From: Paul Aitken To: gtcubed@aim.com Cc: ipfix-info@net.doit.wisc.edu Sent: Mon, 19 Sep 2005 16:13:39 +0100 Subject: Re: [ipfix-info] Observation Point and Traffic Direction gtcubed,=A0 =A0 > I need a quick clarification regarding IPFIX terminology.=A0 > > If the observation point is defined to be an interface such as=A0 > > int Gig 1/1.=A0 > > Does the metering process capture ingress packets, egress packets=20 or both?=A0 > > Or is the traffic direction explicitly specified.=A0 =A0 A bidirectional interface is a rather vague observation "point". Apart=20 from the direction issue, there's no indication whether the OP is=20 before or after any processing - though one might assume an OP to be on=20 the input traffic before processing.=A0 =A0 Break your interface (conceptually!) into input and output sides, so a=20 simple device can be modelled as:=A0 =A0 =A0 X Y=A0 =A0 input ---> processing ---> output=A0 =A0 So the observation point can be at X on the input side or at Y on the=20 output side (or both, or neither).=A0 =A0 The OP might even be in the midst of processing eg, reporting some=20 internal processing statistics.=A0 =A0 Cheers.=A0 -- Paul Aitken=A0 Cisco Systems Ltd, Edinburgh, Scotland.=A0 ________________________________________________________________________ Check Out the new free AIM(R) Mail -- 2 GB of storage and=20 industry-leading spam and email virus protection. -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From janele@dch-lemvig.dk Tue Sep 20 02:56:18 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHc38-0001Fk-Ho for ipfix-archive@megatron.ietf.org; Tue, 20 Sep 2005 02:56:18 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA11602 for ; Tue, 20 Sep 2005 02:56:15 -0400 (EDT) Received: from [82.77.58.121] (helo=dch-lemvig.dk) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EHbhP-0003ni-00 for ipfix-list@mil.doit.wisc.edu; Tue, 20 Sep 2005 01:33:51 -0500 Message-ID: <004a01c5bdad$38364600$6918a8c0@coulter> Reply-To: "Janele Boysen" From: "Janele Boysen" To: "Liliana Pretty" Subject: Re: Phwarmaceutical No Failure Date: Tue, 20 Sep 2005 01:33:32 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0047_01C5BD83.4F603E00" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?82.77.58.121 This is a multi-part message in MIME format. ------=_NextPart_000_0047_01C5BD83.4F603E00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable VCCVUPXAM= L AeIIlramee LlAAtonbrv IeLGrpaiii= UbIRaexedt= MrexSAmcia = niara $3$1$3 = 75.21.33 = http://www.asotenosile.com columns and golden statues, was as if blind under = the brightest moon. Here, 7. There great heaps... of gold are mine: Lines = from Hermanns aria in ------=_NextPart_000_0047_01C5BD83.4F603E00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
 ------=_NextPart_000_0047_01C5BD83.4F603E00-- From preetyro@scotlandart.com Wed Sep 21 02:39:28 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHyGO-0008IJ-Om for ipfix-archive@megatron.ietf.org; Wed, 21 Sep 2005 02:39:28 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA29748 for ; Wed, 21 Sep 2005 02:39:26 -0400 (EDT) Received: from 200.95.134.170.cableonline.com.mx ([200.95.134.170] helo=scotlandart.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EHxsd-0003Az-00 for ipfix-list@mil.doit.wisc.edu; Wed, 21 Sep 2005 01:14:56 -0500 Message-ID: <002901c5be73$b9581080$8e0fa8c0@approve> Reply-To: "Tyron Preece" From: "Tyron Preece" To: "Jenny Drexler" Subject: Re: Pharomaceutical well, try it Date: Wed, 21 Sep 2005 01:14:29 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0026_01C5BE49.D0820880" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?200.95.134.170 This is a multi-part message in MIME format. ------=_NextPart_000_0026_01C5BE49.D0820880 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable VPVMXCULA= C IrAeaIleme AoLrnAtvbl GpIiaLrii= e ReUdxIateb AciaMia Smra= nrex $3$3 $1 = 33.75 .21 = http://www.michelsbutle= rs.com I ask you, where are they? You dont think... ? this Annushka was one = of the tenants. Besides that and above all it was ------=_NextPart_000_0026_01C5BE49.D0820880 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
 ------=_NextPart_000_0026_01C5BE49.D0820880-- From majordomo@mil.doit.wisc.edu Wed Sep 21 16:55:15 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIBcY-0007zO-Up for ipfix-archive@megatron.ietf.org; Wed, 21 Sep 2005 16:55:15 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA29712 for ; Wed, 21 Sep 2005 16:55:12 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EIBFW-0001xk-00 for ipfix-list@mil.doit.wisc.edu; Wed, 21 Sep 2005 15:31:26 -0500 Received: from kyoto.netlab.nec.de ([195.37.70.21]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EIBFV-0001xe-00 for ipfix-info@net.doit.wisc.edu; Wed, 21 Sep 2005 15:31:25 -0500 Received: from [192.168.1.129] (HSI-KBW-085-216-002-068.hsi.kabelbw.de [85.216.2.68]) by kyoto.netlab.nec.de (Postfix) with ESMTP id 723F21BAC99; Wed, 21 Sep 2005 22:31:24 +0200 (CEST) Date: Wed, 21 Sep 2005 22:30:55 +0200 From: Juergen Quittek To: Robert Lowe , Lutz Mark Cc: Thomas Dietz , ipfix-info@net.doit.wisc.edu Subject: Re: [ipfix-info] new version of IPFIX info model Message-ID: <3C717ABF6BA372B7705030F1@753F3B888A9969457862729D> In-Reply-To: <432AF715.7040504@lawrence.edu> References: <432AF715.7040504@lawrence.edu> X-Mailer: Mulberry/3.1.6 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Dear Lutz and all, I would like to come to a conclusion. Here is what I currently have. I am not sure whether or not this description reflects the outcome of our discussion well. 5.1.7. flowId Description: An identifier of a Flow that is unique within an Observation Domain. This Information Element can be used to distinguish between different Flows if Flow Keys such as IP addresses and port numbers are not reported or reported in separate records. Abstract Data Type: unsigned32 Data Type Semantics: identifier ElementId: 148 Status: current Please have a look at it and comment. Thanks, Juergen -- Juergen Quittek quittek@netlab.nec.de Tel: +49 6221 90511-15 NEC Europe Ltd., Network Laboratories Fax: +49 6221 90511-55 Kurfuersten-Anlage 36, 69115 Heidelberg, Germany http://www.netlab.nec.de --On 9/16/2005 6:47 PM +0200 Robert Lowe wrote: > > Just a couple of phrasing suggestions/corrections... provided this > change is to find its way into some draft. > > -Robert > >>> I guess the wording is a bit missleading. An Observation Domain can be a >>> scope, so maybe it should read >>> >>> An identifier of a Flow that is unique within an observation >>> domain. This Information Element differs different flows when > ^^^^^^^^^^^^^^^^^ > distinguishes between different > (is used to distinguish between different) > > -OR- > > differentiates separate, distinct > (is used to differentiate separate, distinct) > >>> the flow details like IP Address, Protocol or Port are not of >>> intrest or these flow details are exported in a different > ^^^^^^^ > interest, > >>> template. > > > -- > Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say > "unsubscribe ipfix" in message body > Archive http://ipfix.doit.wisc.edu/archive/ -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From tearachfkenner@ici.com Thu Sep 22 00:05:34 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIIKy-0002QK-UH for ipfix-archive@megatron.ietf.org; Thu, 22 Sep 2005 00:05:34 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA20975 for ; Thu, 22 Sep 2005 00:05:29 -0400 (EDT) Received: from [221.163.178.222] (helo=ici.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EIICD-000433-00 for ipfix-list@mil.doit.wisc.edu; Wed, 21 Sep 2005 22:56:30 -0500 Message-ID: <004e01c5bf29$925c1600$616ca8c0@unstring> Reply-To: "Tearach Kenner" From: "Tearach Kenner" To: "Eldad Vidal" Subject: =?iso-8859-1?Q?Re:_V_forever_-_Pharrmaceut=EFcal?= Date: Wed, 21 Sep 2005 22:56:12 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_004B_01C5BEFF.A9860E00" X-Priority: 2 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_004B_01C5BEFF.A9860E00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Ce Ul Am Va Xa = Ci Vi Me Pr Le le tr bi li na al = ag ri op vi br am en um x is = ra di ec tr ex = a ia a $1.50 $1.05 $2.89 $3.75 = $1.42 $1.21 $3.33 $2.22 $1.22 $4.16 http://www.homamehereb.com Goethe once refers to the devil as Junker Woland. No, Margaritas right ... = Of course, this is the devils messenger ------=_NextPart_000_004B_01C5BEFF.A9860E00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Ce Ul Am Va Xa = Ci Vi Me Pr Le le tr bi li na al = ag ri op vi br am en um x is = ra di ec tr ex          =          a  ia a   $1.50  $1.05  $2.89  $3.75 =  $1.42  $1.21  $3.33  $2.22  $1.22  $4.16<= /TD>
------=_NextPart_000_004B_01C5BEFF.A9860E00-- From majordomo@mil.doit.wisc.edu Thu Sep 22 11:49:08 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EITJs-0004xp-01 for ipfix-archive@megatron.ietf.org; Thu, 22 Sep 2005 11:49:08 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA08004 for ; Thu, 22 Sep 2005 11:49:05 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EISsG-0000WD-00 for ipfix-list@mil.doit.wisc.edu; Thu, 22 Sep 2005 10:20:36 -0500 Received: from rommie.caida.org ([192.172.226.78] helo=caida.org) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EISsF-0000W7-00 for ipfix@net.doit.wisc.edu; Thu, 22 Sep 2005 10:20:36 -0500 Received: by caida.org (Postfix, from userid 2017) id 213ED452F7; Thu, 22 Sep 2005 08:20:35 -0700 (PDT) To: ipfix@net.doit.wisc.edu Subject: [ipfix] current enterprise IE approach is insufficient Content-Type: text/plain; charset=US-ASCII From: David Moore Date: Thu, 22 Sep 2005 08:20:34 -0700 Message-ID: User-Agent: Gnus/5.110004 (No Gnus v0.4) XEmacs/21.4.14 (berkeley-unix) MIME-Version: 1.0 Precedence: bulk Sender: majordomo listserver In BOF and small group discussions at FloCon this week, several current developers of flow meters/exporters had concerns with the usefulness of IPFIX for their data. Developers of analysis/aggregation/reporting tools also had similar concerns about their ability to write generic processing tools. While several concerns were raised, this one seemed to be the greatest problem for both adoption and functionality. As a short summary: The current information model approach only provides information elements in the templates which combine *both* data type (i.e. section 3 of info draft) and specific semantics. And there is no current mechanism to provide the data type for a given information element (e.g. a vendor specific one). Allowing this information to be provided either in the data-stream via templates/records or via some automatable external lookup (e.g. XDS). The current situation makes writing lots of analysis tools difficult. Personal, real life example of the pain: For caida network telescope data about DoS backscatter, one natural representation of the data would be in flows which contain 3 IP addresses as part of the key. We call these 3 addresses: Attack IP, Target IP and Responding IP. None of these 3 addresses have semantic meaning which natural maps to IPFIX's sourceIPv4Address or sourceIPv4Address. However all five have the same data type, ipv4Address. So the current procedure for me to provide this data in an IPFIX format would be to create 3 new IE (information elements) identifiers within my enterpriseID space. At first glance, this seems like there is extensibility supported in the protocol for me to do what I want. However, I will not be able to use any existing analysis tools on this data, since they will not recognize these IEs. As a specific example, I would be unable to use nafscii to convert my records to a text format without either adding code to nafscii or explicitly adding my IEs to nafscii config files in a tool-specific manner. But nafscii (and a large set of other tools) doesn't need to know the semantics of these fields to display them. Many tools only need to know the field's data type to work on them. However, the IPFIX working group hasn't provided any mechanism for people to provide the data type of an IE in a standardized automatable way. Having to do some sort of tool-specific configuration (or code modification) on every tool just to tell it that X is an ipv4Address and Y is a totalCounter in an unsigned64 is a huge amount of work for users and developers of vendor specific IEs. Two possible approaches to get around this would be to have some mechanism for including the data type infomation in the stream, perhaps via some sort of record which allows mapping pairs to data type information, or to have some external mechanism for tools to be able to obtain the information about IEs for a given enterpriseID. One potential advantage of the external approach is that there would then be plenty of space to include all of the additional information that one would want, such as the name, description, references, etc. However, including the information inline, allows more rapid processessing of the data, and allows the flow stream (or file) to be partially self-documenting (the point of templates in general). Solving this problem seems very appropriate for the ipfix wg. -- david -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Thu Sep 22 12:53:44 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIUKO-0000sh-DM for ipfix-archive@megatron.ietf.org; Thu, 22 Sep 2005 12:53:44 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA10806 for ; Thu, 22 Sep 2005 12:53:41 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EIUEO-0004l5-00 for ipfix-list@mil.doit.wisc.edu; Thu, 22 Sep 2005 11:47:32 -0500 Received: from purgatory.unfix.org ([213.136.24.43]) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EIUEN-0004l0-00 for ipfix@net.doit.wisc.edu; Thu, 22 Sep 2005 11:47:31 -0500 Received: from [213.154.246.83] (limbo.unfix.org [213.154.246.83]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by purgatory.unfix.org (Postfix) with ESMTP id 28C097F5E; Thu, 22 Sep 2005 18:47:27 +0200 (CEST) Message-ID: <4332E00A.9000105@unfix.org> Date: Thu, 22 Sep 2005 18:47:06 +0200 From: Jeroen Massar Organization: Unfix User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: David Moore CC: ipfix@net.doit.wisc.edu Subject: Re: [ipfix] current enterprise IE approach is insufficient References: In-Reply-To: X-Enigmail-Version: 0.92.1.0 OpenPGP: url=https://purgatory.unfix.org/pks/lookup?op=get&search=333E7C23 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig797A70D15294702986824410" Precedence: bulk Sender: majordomo listserver This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig797A70D15294702986824410 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit David Moore wrote: > As a short summary: The current information model approach only provides > information elements in the templates which combine *both* data type > (i.e. section 3 of info draft) and specific semantics. This is also an idea that popped into my head. In SNMP one knows what type a certain field is, we could also define this for IPFIX records. Eg IPv4Address, IPv6Address, Counter, Gauge, etc, just look at SNMP. Basically this will turn IPFIX into a push-model SNMP which has it's own set of (dis)advantages. Greets, Jeroen --------------enig797A70D15294702986824410 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) Comment: Jeroen Massar / http://unfix.org/~jeroen/ iD8DBQFDMuAVKaooUjM+fCMRAj35AJ9VZC83wLSSUfGpF42ROU2ZcX9GtQCfTXTl TGEuKLjSwjnGnsHif4byWkA= =gXbE -----END PGP SIGNATURE----- --------------enig797A70D15294702986824410-- -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From godfriefnwccfnevkcct@r.recruit.co.jp Fri Sep 23 07:19:47 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIlal-0005Db-Ec for ipfix-archive@megatron.ietf.org; Fri, 23 Sep 2005 07:19:47 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA08302 for ; Fri, 23 Sep 2005 07:19:45 -0400 (EDT) Received: from alille-152-1-31-189.w83-192.abo.wanadoo.fr ([83.192.253.189] helo=r.recruit.co.jp) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EIlGR-0000ug-00 for ipfix-list@mil.doit.wisc.edu; Fri, 23 Sep 2005 05:58:48 -0500 Message-ID: <005c01c5c02d$bbfe6580$d8c5a8c0@wharves> Reply-To: "Godfried Timko" From: "Godfried Timko" To: "Paolo Hitch" Subject: Re: Phearmaceutical Go od proposal Date: Fri, 23 Sep 2005 05:58:31 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0059_01C5C003.D3285D80" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_0059_01C5C003.D3285D80 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable VACI= LePrCeAmXaVIMeUl LIALvioplebinaAGritr = UMIStraeciabrexenxRAdiaam $3$1 $3 = ; 75.21= = 33 http://www.feturislat.com after the invisible enterers, peeked into the front = hall, but of course saw of the edge with his finger, and said: ------=_NextPart_000_0059_01C5C003.D3285D80 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
VA
CI=
Le
Pr
Ce
Am
Xa
VI
Me
Ul
 LI
AL
vi
op
le
bi
na
<= /div>AG
ri
tr
= UM
IS
tra
ecia
brex
en
x
RA
dia
am
$3
$1
 
 
 
 
 
$3
 = ;
 
.75
.21
=  
 
 
 
 
.= 33
 
 
 
------=_NextPart_000_0059_01C5C003.D3285D80-- From remeiunruh@aimcg.com Sat Sep 24 19:09:22 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EJJ90-0005l2-Ce for ipfix-archive@megatron.ietf.org; Sat, 24 Sep 2005 19:09:22 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA27505 for ; Sat, 24 Sep 2005 19:09:18 -0400 (EDT) Received: from [201.144.120.38] (helo=aimcg.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EJIm5-00069A-00 for ipfix-list@mil.doit.wisc.edu; Sat, 24 Sep 2005 17:45:42 -0500 Message-ID: <003301c5c159$ad14d180$d817a8c0@bepuzzle> Reply-To: "Remei Unruh" From: "Remei Unruh" To: "Dyson Oney" Subject: Re: Medilcations Not Another Bad Off r Date: Sat, 24 Sep 2005 17:45:35 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0030_01C5C12F.C43EC980" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_0030_01C5C12F.C43EC980 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable XLCPACVUM= V aeIrmeAleI nvAoblLtr= A aiLpieIri= G xtIeebUadR raScianrexMmiaA $1 $3 = $3 21 .75 = 33 http://www.bardwinow.com To continue, said Ivan, trying to fall in with = Stravinskys tone, and Franz Schubert (1797-1828), inspired by Goethes Faust. ------=_NextPart_000_0030_01C5C12F.C43EC980 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
X
L
C
P
A
C
V
U
M=
V
a
e
I
r
m
e
A
l
eI
n
v
A
o
b
l
L
t
r
= A
a
i
L
p
i
e
I
r
i=
G
x
t
I
e
e
b
U
a
d<= BR>R

ra
S
cia
n
rex
Mm
ia
A


$1



$3
=

$3


.21



.75

=
.33
 
------=_NextPart_000_0030_01C5C12F.C43EC980-- From 53lucian@about.com Sun Sep 25 12:23:45 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EJZGM-0000d9-7M for ipfix-archive@megatron.ietf.org; Sun, 25 Sep 2005 12:22:02 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA13996 for ; Sun, 25 Sep 2005 10:35:12 -0400 (EDT) Received: from [82.213.187.249] (helo=82.213.187.249) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EJXJM-0003Ln-00 for ipfix-list@mil.doit.wisc.edu; Sun, 25 Sep 2005 09:17:01 -0500 Message-ID: <124301c5c1d9$c3fe9fb6$718f1143@about.com> From: "Jennifer A. Clark" <53lucian@about.com> To: ipfix-list@mil.doit.wisc.edu Subject: =?iso-8859-1?B?QWxsIHNvZnR3YXJlIC0gd2hvbGVzYWxlIHByaWNl?= Date: Sun, 25 Sep 2005 14:03:50 +0000 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0000_E6735D90.4E5431E9" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express V6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 This is a multi-part message in MIME format. ------=_NextPart_000_0000_E6735D90.4E5431E9 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0001_31E70573.59B7FF5A" ------=_NextPart_001_0001_31E70573.59B7FF5A Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Access all the popular software imaginable for wholesale prices! Our software is 2-10 times cheaper than sold by our competitors. A few examples: $79.95 Windows XP Professional (Including: Service Pack 2) $89.95 Microsoft Office 2003 Professional / $79.95 Office XP Professional $99.95 Adobe Photoshop 8.0/CS (Including: ImageReady CS) $69.95 Dreamweaver MX 2004 / Flash MX 2004 / Fireworks MX $149.95 Adobe Creative Suite Premium (5 CD) $79.95 Adobe Acrobat 6.0 Professional $69.95 MS Project 2003 Professional Special offers: $89.95 Windows XP Pro + Office XP Pro $129.95 Photoshop 7 + Premiere 7 + Illustrator 10 $109.95 Dreamweaver MX 2004 + Flash MX 2004 All main products from Microsoft, Adobe, Macromedia, Corel, etc. And many more... Please visit us at: http://www.cds-for-you.com Best, Jennifer Clark ________________________________ To be taken off future campaigns, go here ________________________________ ------=_NextPart_001_0001_31E70573.59B7FF5A Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: 7bit
Access all the popular software imaginable for wholesale prices!
Our software is 2-10 times cheaper than sold by our competitors.

A few examples:
$79.95 Windows XP Professional (Including: Service Pack 2)
$89.95 Microsoft Office 2003 Professional / $79.95 Office XP Professional
$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady CS)
$69.95 Dreamweaver MX 2004 / Flash MX 2004 / Fireworks MX
$149.95 Adobe Creative Suite Premium (5 CD)
$79.95 Adobe Acrobat 6.0 Professional
$69.95 MS Project 2003 Professional

Special offers:
$89.95 Windows XP Pro + Office XP Pro
$129.95 Photoshop 7 + Premiere 7 + Illustrator 10
$109.95 Dreamweaver MX 2004 + Flash MX 2004

All main products from Microsoft, Adobe, Macromedia, Corel, etc.
And many more... Please visit us at:

http://www.cds-for-you.com

Best,
Jennifer Clark


________________________________
To be taken off future campaigns, go here
________________________________

------=_NextPart_001_0001_31E70573.59B7FF5A-- ------=_NextPart_000_0000_E6735D90.4E5431E9-- From majordomo@mil.doit.wisc.edu Sun Sep 25 17:26:24 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EJe04-0007ta-V6 for ipfix-archive@megatron.ietf.org; Sun, 25 Sep 2005 17:26:24 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA03891 for ; Sun, 25 Sep 2005 17:25:22 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EJdo0-0001ry-00 for ipfix-list@mil.doit.wisc.edu; Sun, 25 Sep 2005 16:13:04 -0500 Received: from groucho.itss.auckland.ac.nz ([130.216.190.11] helo=smtpa.itss.auckland.ac.nz) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EJdnz-0001rs-00 for ipfix@net.doit.wisc.edu; Sun, 25 Sep 2005 16:13:03 -0500 Received: from localhost (smtpa.itss.auckland.ac.nz [127.0.0.1]) by smtpa.itss.auckland.ac.nz (Postfix) with ESMTP id 5345033EF0; Mon, 26 Sep 2005 09:13:02 +1200 (NZST) Received: from smtpa.itss.auckland.ac.nz ([127.0.0.1]) by localhost (smtpa.itss.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 05922-25; Mon, 26 Sep 2005 09:13:02 +1200 (NZST) Received: from motoko.itss.auckland.ac.nz (motoko.itss.auckland.ac.nz [130.216.191.146]) by smtpa.itss.auckland.ac.nz (Postfix) with ESMTP id 3AABF342CA; Mon, 26 Sep 2005 09:13:02 +1200 (NZST) Received: (from apache@localhost) by motoko.itss.auckland.ac.nz (8.11.6/8.11.6) id j8PLD1l00552; Mon, 26 Sep 2005 09:13:01 +1200 Received: from n.brownlee1.enarc.auckland.ac.nz (n.brownlee1.enarc.auckland.ac.nz [130.216.4.32]) by webmail.auckland.ac.nz (Horde) with HTTP for ; Mon, 26 Sep 2005 09:13:01 +1200 Message-ID: <1127682781.dfd8e31ed61a8@webmail.auckland.ac.nz> Date: Mon, 26 Sep 2005 09:13:01 +1200 From: Nevil Brownlee To: David Moore Cc: ipfix@net.doit.wisc.edu Subject: Re: [ipfix] current enterprise IE approach is insufficient References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) 4.0-cvs X-Originating-IP: 130.216.4.32 X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Quoting David Moore : > Two possible approaches to get around this would be to have some > mechanism for including the data type infomation in the stream, perhaps > via some sort of record which allows mapping pairs to > data type information, or to have some external mechanism for tools to > be able to obtain the information about IEs for a given enterpriseID. > One potential advantage of the external approach is that there would > then be plenty of space to include all of the additional information > that one would want, such as the name, description, references, etc. > However, including the information inline, allows more rapid > processessing of the data, and allows the flow stream (or file) to be > partially self-documenting (the point of templates in general). > > Solving this problem seems very appropriate for the ipfix wg. I think David summarised this problem very clearly. IPFIX has tended to focus on minimising the overhead for its info elements, that's why their type is included in the semantics for each one. The notion was that when a collector meets an IE it doesn't know, it does know its length, so it can preserve it in archived files, etc. Having a way to create generalised, (probably) application-specific IE, e.g. three IPv4 addresses, in a way that allows 'generalised' collecting and processing packages to know their type so as to display them sounds useful to me. Right now the IPFIX WG is trying hard to get its four current drafts submitted to IESG, so that the protocol and information model (at last) have an agreed standard form. That will complete the current charter work items. From there, there are certainly quite a few potential work items the group could take on. However, for that to happen, we'd need to modify/extend the WG charter. The most effective way to do that is for interested groups to develop ways to extend IPFIX (within/buiilding on its current framework) to achieve whetever it is they need, then publish their proposal for that as individual IDs. That way we have a clearly-defined, active community, who can be seen to be working to get their proposal standardised. So now, David has put forward the case for 'generic, type-specified information elements' in IPFIX. The mailing list is here to support discussion and development for extensions like that ... Cheers, Nevil ----------------------------------------------------------------------- Nevil Brownlee Computer Science Department | ITSS Phone: +64 9 373 7599 x88941 The University of Auckland FAX: +64 9 373 7021 Private Bag 92019, Auckland, New Zealand ------------------------------------------------- This mail sent through University of Auckland http://www.auckland.ac.nz/ -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From mcbrydgib@galderma.com Sun Sep 25 17:47:04 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EJeKs-0002qs-BM for ipfix-archive@megatron.ietf.org; Sun, 25 Sep 2005 17:47:04 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA04545 for ; Sun, 25 Sep 2005 17:46:47 -0400 (EDT) Received: from h253.230.213.151.ip.alltel.net ([151.213.230.253] helo=galderma.com) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EJeDv-0003hq-00 for ipfix-list@mil.doit.wisc.edu; Sun, 25 Sep 2005 16:39:52 -0500 Message-ID: <005f01c5c219$a9488400$b901a8c0@gusher> Reply-To: "Gib Mcbryde" From: "Gib Mcbryde" To: "Livia Sitzman" Subject: Re: Excellent , Phamrrmacy Date: Sun, 25 Sep 2005 16:39:52 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_005C_01C5C1EF.C0727C00" X-Priority: 2 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_005C_01C5C1EF.C0727C00 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable ----- Original Message ----- By no means ... began Margarita. `what do you think, the Moscow = populace has changed significantly, hasnt briefly. Azazello thrust his clawed = = hand into the stove, pulled out a face by Homeless. And the trouble is not = that they were insulting, but that accusation, which was levelled against = Bulgakov himself after the ones have to suffer for the likes of = him! CiaXanMeUltrViaCelValProAmLev = lisaxridia= amgraebrexiumpeciab= ienitra $ $ $ = 1.21 3.33 3.75 = http://www.mrslaid.com ------=_NextPart_000_005C_01C5C1EF.C0727C00 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
----- Original Message -----
By no means ... began Margarita. `what do you think, the Moscow = populace has changed significantly, hasnt briefly. Azazello thrust his clawed = hand into the stove, pulled out a face by Homeless. And the trouble is not = that they were insulting, but that accusation, which was levelled against = Bulgakov himself after the ones have to suffer for the likes of = him!
 
Cia
Xan
Me
Ultr<= BR>Via
Cel
Val
Pro
Am
Lev =
lis
ax
ridia
= am
gra
ebrex
ium
pecia
b= ien
itra
$



$

$


=
1.21



3.33

3.75
=

 
------=_NextPart_000_005C_01C5C1EF.C0727C00-- From hallebxmart@ac-toulouse.fr Mon Sep 26 16:17:26 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EJzPi-0002xq-SI for ipfix-archive@megatron.ietf.org; Mon, 26 Sep 2005 16:17:26 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA07099 for ; Mon, 26 Sep 2005 16:17:24 -0400 (EDT) Received: from ppp066.eld.centurytel.net ([66.112.34.49] helo=ac-toulouse.fr) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EJz2H-0005j7-00 for ipfix-list@mil.doit.wisc.edu; Mon, 26 Sep 2005 14:53:14 -0500 Received: from [192.168.4.124] (helo=lightish) by ac-toulouse.fr with SMTP (Caboodle 1.64) id kqdlWV-kkYPdR-Fk for ipfix-list@mil.doit.wisc.edu; Mon, 26 Sep 2005 14:53:15 -0500 Message-ID: <124317.NMXNBGQLOMTA@lightish> Reply-To: "Martial Halle" From: "Martial Halle" To: "Easter Goucher" Subject: Check this offr Phalrrmacy Date: Mon, 26 Sep 2005 14:53:13 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="MTPONIC.JCUEVUSAEPLF" X-Priority: 3 X-Mailer: Employable yi 3.96 X-RBL-Warning: (dnsbl.njabl.org) This is a multi-part message in MIME format. --MTPONIC.JCUEVUSAEPLF Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Sup Vis er Ch it us eap Vi and ge agra Ci t BIG S alis Val AVINGS u ium Xan p to 80 ax and more % http://www.geocities.com/buddymotter/ --MTPONIC.JCUEVUSAEPLF Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
 
Sup
Vis
er Ch
it us
eap Vi
and ge
agra Ci
t BIG S
alis Val
AVINGS u
ium Xan
p to 80
ax and more
%
 --MTPONIC.JCUEVUSAEPLF-- From andrewcign@intelispan.com Mon Sep 26 22:56:54 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EK5eI-0007Hd-B1 for ipfix-archive@megatron.ietf.org; Mon, 26 Sep 2005 22:56:54 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA26954 for ; Mon, 26 Sep 2005 22:56:51 -0400 (EDT) Received: from [221.132.57.245] (helo=221.132.57.245) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EK5WF-00008D-00 for ipfix-list@mil.doit.wisc.edu; Mon, 26 Sep 2005 21:48:36 -0500 Received: from maila.mcleodusa.com by 221.132.57.245 (8.9.3/8.9.3) with SMTP id SlzirY6JcMfR for ; Mon, 26 Sep 2005 22:49:22 -0400 Received: from unknown (58.167.3.106) by maila.mcleodusa.com with ESMTP for ; Mon, 26 Sep 2005 22:49:22 -0400 Date: Mon, 26 Sep 2005 22:49:22 -0400 From: Lance Thorne Reply-To: Lance Thorne Message-ID: <749518338185.959421633330@intelispan.com> To: Subject: Computer Company Offer JOB MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Transfer-Encoding: 7bit Dear Sir/Madam! If you are looking for a good job then we can defenitely help you! One of the biggest Finance Company of East Europe would be glad to offer an excellent job for you with high salary! You will not need to invest or buy products in order to work with us. No money to start? About us: Finance Company, Lithuania was founded in 1995 by a team of antiquities experts. By now our company has grown from a small company with 7 employees to an international group with several representative offices in different countries of the world. Nowadays we are not just selling and buying antiques, but are also dealing with organizations of international exhibitions, seminars, tours and many other things. Our vacancies:Now clients of our company conduct financial operations all over the world including New Zeland, but due to sufficient perfection in Banking Service we have some difficulties in translation and reorganization of our business, therefore we are planning to open branches in which we require New Zelands. Now we are looking for financial assistants who will be responsible to accept payments from our clients. At this moment we provide and offer work at home, after opening offices in New Zeland, you will have an opportunity for working in our offices as well. Today we are looking for financial assistants that will be responsible to accept payments from clients through bank transfer, because of imperfection of bank system. New Zelands partners of our clients have some difficulties with sending bank translations and cheques to East Europe. You can make 10 % commission from every transfer you will receive through relative to our business. The rest needs to be transferred to our company's representative by Western Union; all Western Union fees are paid by us. On average you will be making 2,000 US Dollars per week. We believe that you can get good future and achievements in our business. If our offer is interesting to you, please feel free in sending a mail to our HR office. For more information our crew of Human Resources is ready to answer all your questions. If you are ready to start working with us then you need to register on our personal website of our company and you will get a personal account that you will work with . After you done that and you got an account - we start working with you within 24 hours. Go to http://realjob-inworld.com click " REGISTER" Best Regards Real Job Inworld Comp. From seppfsolydsturg@thu.ac.jp Wed Sep 28 08:18:58 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EKatl-0000VP-UF for ipfix-archive@megatron.ietf.org; Wed, 28 Sep 2005 08:18:57 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA02246 for ; Wed, 28 Sep 2005 08:18:56 -0400 (EDT) Received: from bb220-255-118-62.singnet.com.sg ([220.255.118.62] helo=thu.ac.jp) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EKaUi-0006vl-00 for ipfix-list@mil.doit.wisc.edu; Wed, 28 Sep 2005 06:53:04 -0500 Message-ID: <001701c5c423$2b57c900$7acda8c0@paravane> Reply-To: "Seppel Sturgill" From: "Seppel Sturgill" To: "Hjalmar Rainey" Subject: Pharkmacy comply Date: Wed, 28 Sep 2005 06:52:58 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0014_01C5C3F9.4281C100" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_0014_01C5C3F9.4281C100 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, XVPUMACLVCaIrlemIeAenAotrbA= vLlaGpriiLiIexReadeItUb Aciami= anSraMrex $3 $1$3 .33 .21 = 75 h= ttp://www.omvkdo.seatavern.com the hood. Semi-darkness set in, and lightning farrowed the black sky. Fire = and, like its master, it gazed anxiously at the moon. Pieces of a broken jug ------=_NextPart_000_0014_01C5C3F9.4281C100 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hello,
X
V
P
U<= BR>M
A
C
L
V
Ca
I
r
l
e
m
I
e
A
en
A
o
t
r
b
A
= v
L
la
Gp
r
i
i
L
i
I
ex
R
e
a
d
e
I
t
U
b
A
cia
m
i= a
n
S
ra
M
rex
$3




$1

$3
.33




.21
=
.75
h= ttp://www.omvkdo.seatavern.com
------=_NextPart_000_0014_01C5C3F9.4281C100-- From majordomo@mil.doit.wisc.edu Wed Sep 28 15:56:53 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EKi2v-0000Yx-I7 for ipfix-archive@megatron.ietf.org; Wed, 28 Sep 2005 15:56:53 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA03782 for ; Wed, 28 Sep 2005 15:56:51 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EKhwJ-0001w6-00 for ipfix-list@mil.doit.wisc.edu; Wed, 28 Sep 2005 14:50:03 -0500 Received: from [132.151.6.50] (helo=newodin.ietf.org) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EKhwI-0001w0-00 for ipfix@net.doit.wisc.edu; Wed, 28 Sep 2005 14:50:02 -0500 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1EKhwH-00012w-Sg; Wed, 28 Sep 2005 15:50:01 -0400 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ipfix@net.doit.wisc.edu From: Internet-Drafts@ietf.org Subject: [ipfix] I-D ACTION:draft-ietf-ipfix-info-11.txt Message-Id: Date: Wed, 28 Sep 2005 15:50:01 -0400 Precedence: bulk Sender: majordomo listserver --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Flow Information Export Working Group of the IETF. Title : Information Model for IP Flow Information Export Author(s) : J. Quittek, et al. Filename : draft-ietf-ipfix-info-11.txt Pages : 140 Date : 2005-9-28 This memo defines an information model for the IP Flow Information eXport (IPFIX) protocol. It is used by the IPFIX protocol for encoding measured traffic information and information related to the traffic Observation Point, the traffic Metering Process and the Exporting Process. Although developed for the IPFIX protocol, the model is defined in an open way that easily allows using it in other protocols, interfaces, and applications. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ipfix-info-11.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ipfix-info-11.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ipfix-info-11.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-9-28132852.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ipfix-info-11.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ipfix-info-11.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-9-28132852.I-D@ietf.org> --OtherAccess-- --NextPart-- -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From majordomo@mil.doit.wisc.edu Wed Sep 28 21:52:38 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EKnbC-0002Pp-7s for ipfix-archive@megatron.ietf.org; Wed, 28 Sep 2005 21:52:38 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA27615 for ; Wed, 28 Sep 2005 21:52:36 -0400 (EDT) Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1) id 1EKnFh-00049S-00 for ipfix-list@mil.doit.wisc.edu; Wed, 28 Sep 2005 20:30:25 -0500 Received: from chico.itss.auckland.ac.nz ([130.216.190.12] helo=smtpb.itss.auckland.ac.nz) by mil.doit.wisc.edu with esmtp (Exim 3.13 #1) id 1EKnFf-00049K-00 for ipfix@net.doit.wisc.edu; Wed, 28 Sep 2005 20:30:23 -0500 Received: from localhost (localhost.localdomain [127.0.0.1]) by smtpb.itss.auckland.ac.nz (Postfix) with ESMTP id 2A4993408B; Thu, 29 Sep 2005 13:30:22 +1200 (NZST) Received: from smtpb.itss.auckland.ac.nz ([127.0.0.1]) by localhost (smtpb.itss.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17930-29; Thu, 29 Sep 2005 13:30:22 +1200 (NZST) Received: from motoko.itss.auckland.ac.nz (motoko.itss.auckland.ac.nz [130.216.191.146]) by smtpb.itss.auckland.ac.nz (Postfix) with ESMTP id AA26F34114; Thu, 29 Sep 2005 13:30:21 +1200 (NZST) Received: (from apache@localhost) by motoko.itss.auckland.ac.nz (8.11.6/8.11.6) id j8T1UK205192; Thu, 29 Sep 2005 13:30:20 +1200 Received: from dhcp-38-21.cs.auckland.ac.nz (dhcp-38-21.cs.auckland.ac.nz [130.216.38.236]) by webmail.auckland.ac.nz (Horde) with HTTP for ; Thu, 29 Sep 2005 13:30:20 +1200 Message-ID: <1127957420.7f643654989e8@webmail.auckland.ac.nz> Date: Thu, 29 Sep 2005 13:30:20 +1200 From: Nevil Brownlee To: David Kessens , Bert Wijnen Cc: ipfix@net.doit.wisc.edu Subject: [ipfix] Please publish four IPFIX drafts as RFCs MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) 4.0-cvs X-Originating-IP: 130.216.38.236 X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz Precedence: bulk Sender: majordomo listserver Content-Transfer-Encoding: 7bit Hi David and Bert: Following our meeting at IETF in Paris we agreed to revise the drafts to reflect the discussions there, then run another WG last call. That last call produced quite a lot of discussion on the IPFIX mailing list, resulting in editorial changes to the Architecture, Protocol and Info Model drafts. We have now completed those discussions, reaching WG consensus on all four drafts. This note is our formal request to you (our ADs), asking you to submit the four IPFIX drafts to IESG for publication as RFS. The drafts are: Standards Track draft-ietf-ipfix-protocol-19.txt Standards Track draft-ietf-ipfix-info-11.txt Informational draft-ietf-ipfix-architecture-09.txt Informational draft-ietf-ipfix-as-06.txt All four of the drafts have been checked by idnits, no problems were found. I've appended the 'submit to IESG checklist' responses for all four below. During our recent discussions it became clear that there's plenty of interest in adding new Information Elements (IEs) to the IPFIX info model. The architecture makes it fairly easy to do that, and in our IANA Considerations sections we've said that we'll use 'WG Consensus' to decide which new IEs should be added. On the IPFIX list at the end of August we discussed how we'd reach such a consensus; we propose to do this as follows: 1) Implementors are free to develop their own Information Elements using the Vendor IE number sapce. 2) Proposals for new elements to be included in the 'standard' space (i.e. added to the IANA-maintained list) must be posted to the IPFIX mailing list for comment. 3) The WG CoChairs, and the editors of the IPFIX Protocol and Info model drafts will moderate 'new element' discussions until rough consensus is reached. 4) The IPFIX CoChairs will then request IANA to add the new elements to the 'standard space' list. Cheers, Nevil (& Dave) IPFIX co-chairs ----------------------------------------------------------------------- Nevil Brownlee Computer Science Department | ITSS Phone: +64 9 373 7599 x88941 The University of Auckland FAX: +64 9 373 7021 Private Bag 92019, Auckland, New Zealand Document Title: IPFIX Protocol Specification Document reference: draft-ietf-ipfix-protocol-19.txt Document Title: Information Model for IP Flow Information Export Document reference: draft-ietf-ipfix-info-11.txt Document Title: Architecture for IP Flow Information Export Document reference: draft-ietf-ipfix-architecture-09.txt Document Title: IPFIX Applicability Document reference: draft-ietf-ipfix-as-06.txt 1.a) Have the chairs personally reviewed this version of the Internet Draft (ID), and in particular, do they believe this ID is ready to forward to the IESG for publication? Yes. 1.b) Has the document had adequate review from both key WG members and key non-WG members? Do you have any concerns about the depth or breadth of the reviews that have been performed? An adequate review by key WG members was performed. I do not have concerns about depth and breadth of the reviews. 1.c) Do you have concerns that the document needs more review from a particular (broader) perspective (e.g., security, operational complexity, someone familiar with AAA, etc.)? No. 1.d) Do you have any specific concerns/issues with this document that you believe the ADs and/or IESG should be aware of? For example, perhaps you are uncomfortable with certain parts of the document, or have concerns whether there really is a need for it. In any event, if your issues have been discussed in the WG and the WG has indicated it that it still wishes to advance the document, detail those concerns in the write-up. I do not have such concerns. 1.e) How solid is the WG consensus behind this document? Does it represent the strong concurrence of a few individuals, with others being silent, or does the WG as a whole understand and agree with it? There is a solid WG consensus on the content of the draft. The IPFIX system was been tested in an interoperation event immediately before the Paris IETF meeting. Most features of the five implementations wrked well, showing the soundness of the documents. The few issues from that testing have been resolved in the submitted version of the drafts. 1.f) Has anyone threatened an appeal or otherwise indicated extreme discontent? If so, please summarise the areas of conflict in separate email to the Responsible Area Director. No. 1.g) Have the chairs verified that the document adheres to all of the ID nits? (see http://www.ietf.org/ID-Checklist.html). Yes. 1.h) Is the document split into normative and informative references? Are there normative references to IDs, where the IDs are not also ready for advancement or are otherwise in an unclear state? (note here that the RFC editor will not publish an RFC with normative references to IDs, it will delay publication until all such IDs are also ready for publication as RFCs.) The references are split into normative and informative. The normative references include cross-references between these four drafts; the four will need to be published as four RFCs at the same time. 1.i) For Standards Track and BCP documents, the IESG approval announcement includes a write-up section with the following sections: ----------------------------------------------------------------------- Document Title: IPFIX Protocol Specification Document reference: draft-ietf-ipfix-protocol-19.txt Technical Summary This document specifies the IPFIX protocol that serves for transmitting IP traffic flow information over the network. In order to transmit IP traffic flow information from an exporting process to an information collecting process, a common representation of flow data and a standard means of communicating them is required. This document describes how the IPFIX data and templates records are carried over a congestion-aware transport protocol from an IPFIX exporting process to an IPFIX collecting process. Working Group Summary This document was a regular WG document. There is strong consensus in the working group that this framework is an appropriate solution. Protocol Quality The document was thoroughly reviewed by the IPFIX WG. ----------------------------------------------------------------------- Document Title: Information Model for IP Flow Information Export Document reference: draft-ietf-ipfix-info-11.txt Technical Summary This document defines an information model for the IP Flow Information eXport (IPFIX) protocol. It is used by the IPFIX protocol for encoding measured traffic information and information related to the traffic Observation Point, the traffic Metering Process and the Exporting Process. Although developed for the IPFIX protocol, the model is defined in an open way that easily allows using it in other protocols, interfaces, and applications. Working Group Summary This document was a regular WG document. There is strong consensus in the working group that this framework is an appropriate solution. Protocol Quality The document was thoroughly reviewed by the IPFIX WG. ----------------------------------------------------------------------- ------------------------------------------------- This mail sent through University of Auckland http://www.auckland.ac.nz/ -- Help mailto:majordomo@net.doit.wisc.edu and say "help" in message body Unsubscribe mailto:majordomo@net.doit.wisc.edu and say "unsubscribe ipfix" in message body Archive http://ipfix.doit.wisc.edu/archive/ From nevadanp@turbotek.co.kr Thu Sep 29 15:22:04 2005 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EL3ym-0006ga-ID for ipfix-archive@megatron.ietf.org; Thu, 29 Sep 2005 15:22:04 -0400 Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA00154 for ; Thu, 29 Sep 2005 15:22:01 -0400 (EDT) Received: from lns-vlq-21-nan-82-255-71-53.adsl.proxad.net ([82.255.71.53] helo=turbotek.co.kr) by mil.doit.wisc.edu with smtp (Exim 3.13 #1) id 1EL3Wt-000769-00 for ipfix-list@mil.doit.wisc.edu; Thu, 29 Sep 2005 13:53:17 -0500 Message-ID: <003001c5c527$0c425f80$abbfa8c0@furuncle> Reply-To: "Nevada Weible" From: "Nevada Weible" To: "Zsazsa Lentine" Subject: masculinity Puharrmaceutical Date: Thu, 29 Sep 2005 13:53:15 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_002D_01C5C4FD.236C5780" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_002D_01C5C4FD.236C5780 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Fast Home = Easy Total Best ShipDelivOrdeConfPrric pingeryringidentialityes VIALevVALXan= AmbCIA GRAitraIUMax ienLIS $ $ $ 3.33 3.75 1.21 Get = detailedd info 10 Both these publications are in the British Museum, and are = the most beautiful among them to be king. The Jackdaw, knowing ------=_NextPart_000_002D_01C5C4FD.236C5780 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi

Fast
Home =
Easy
Total
Best
Ship
Deliv
Orde
Conf
Prric
ping
ery
ring
identiality
es
VIA
Lev
VAL
Xan
= Amb
CIA
GRA
itra
IUM
ax
ien
LIS
 $

 $


 $
3.33

3.75


1.21
Get = detailedd info
------=_NextPart_000_002D_01C5C4FD.236C5780--