Subject: [sip-clf] sipclf-format-03.

From: Gonzalo Salgueiro <[email-masked]>
Date: Mon, 31 Oct 2011 04:03:17 -0400

Folks: I have submitted draft-ietf-sipclf-format-03.
It is available in the archives [1].

I believe that there are no pending open issues with this document, and will
leave it to the chair to determine the next steps.

The last few open issues have been addressed.

More specifically:

 1) New unified format for logging all optional fields (both Pre-defined and Vendor-specified);
 2) Added 5 examples for logging optional fields;
 3) Moved Flags field from <IndexPointers> to <MandatoryPointers>;
 4) Expanded Flags field from 3 bytes to 5 bytes to include transport and encryption flags;
 5) Added IPv6 square bracket notation for IPv6 address and port based on RFC5952;
 6) "Optional Fields Start Pointer" points to the terminating line-feed (0x0A) at the end of the record when no optional fields are present; 
 7) Added text for logging optional headers separately using the same tag when they occur more than once in a SIP header (Contact, Route, Record-Route, etc.);
 8) Added reference to 4k limit for both optional (including bodies and complete messages) and mandatory fields;
 9) Updated SIP CLF Example.

The diff between -04 and -05 is available at [2].

[1] http://tools.ietf.org/html/draft-ietf-sipclf-format-03
[2] http://tools.ietf.org/rfcdiff?url2=draft-ietf-sipclf-format-03.txt

Thanks,

- Gonzalo