Re: [sacm] Consensus Call: Choosing an IM Expression Syntax

Adam Montville <adam.w.montville@gmail.com> Fri, 08 January 2016 21:37 UTC

Return-Path: <adam.w.montville@gmail.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 172571B2BF4 for <sacm@ietfa.amsl.com>; Fri, 8 Jan 2016 13:37:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LOZSkPD2umxQ for <sacm@ietfa.amsl.com>; Fri, 8 Jan 2016 13:37:47 -0800 (PST)
Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6742A1B2BF3 for <sacm@ietf.org>; Fri, 8 Jan 2016 13:37:47 -0800 (PST)
Received: by mail-oi0-x22b.google.com with SMTP id y66so342940775oig.0 for <sacm@ietf.org>; Fri, 08 Jan 2016 13:37:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=iTKj4k6VKn1DyvFwPt1BcCMf+XPK+94UQR+rDwt9cR0=; b=OcaPW3QWJgmRQmGB52Ais/9pcsv06obVnhN0zCgUcbvaB4DU+JgWaJeusaSOfh9yrm pHyatQIQ02BPvfmQYHI1eVEf38/eiib8e6WSwN6xBkduPD3fnQY8A0wcu+799v0uP4n0 9mFDuh7JghWSiea561ONmGAGYWiutI2HvZq33gsJYAg9eGSapTBydIDn2WKF9skUdmj8 5PJ2Dr/tHRNlrEpo7Dd4kufnv5+/iNH5dAYW14jmEzI88Gm8Zzuc0HiI7p6wocgVr8D6 sz+TF0SwuSV/dDMtsSYXbcwtOUq9q/52bXUPTVgWZiGtgitqM2dDKdIZcJTKHQvH4Lcn GN9w==
X-Received: by 10.202.178.135 with SMTP id b129mr73204387oif.86.1452289066692; Fri, 08 Jan 2016 13:37:46 -0800 (PST)
Received: from macbook-pro.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id u8sm43981434obf.5.2016.01.08.13.37.44 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 08 Jan 2016 13:37:45 -0800 (PST)
Content-Type: multipart/alternative; boundary="Apple-Mail=_ABD53F39-019E-408D-9A14-808AE6132B68"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Adam Montville <adam.w.montville@gmail.com>
In-Reply-To: <CAN40gSufJxV83kcZG16NZtCWwMck_GzO4Umhmp3jMpn9o3RZeg@mail.gmail.com>
Date: Fri, 08 Jan 2016 15:37:43 -0600
Message-Id: <6E8DACAD-B0BD-4352-BBB6-43E8F5D6BE6F@gmail.com>
References: <9F61CC8E6ED7BC4DBA90C13F25D29C006E7028C8@umechpao0.easf.csd.disa.mil> <5682E2EF.2040309@mnt.se> <D2B03252.1524D0%ncamwing@cisco.com> <57E69EB4-3F8C-4C5E-AC85-989FEDE84FDB@cert.org> <C19B61DB-7AF5-4F90-B763-36E3D6AB0CB4@comcast.net> <2D2622C5-72A4-4201-9BD2-54191FCB51BA@cert.org> <9904FB1B0159DA42B0B887B7FA8119CA6BEE031D@AZ-FFEXMB04.global.avaya.com> <BLUPR09MB1047F4D41CAB19086B3311CA5F50@BLUPR09MB104.namprd09.prod.outlook.com> <9904FB1B0159DA42B0B887B7FA8119CA6BEE0903@AZ-FFEXMB04.global.avaya.com> <BLUPR09MB1044FA16C55F7DF136E4FFAA5F50@BLUPR09MB104.namprd09.prod.outlook.com> <CAN40gSufJxV83kcZG16NZtCWwMck_GzO4Umhmp3jMpn9o3RZeg@mail.gmail.com>
To: Ira McDonald <blueroofmusic@gmail.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <http://mailarchive.ietf.org/arch/msg/sacm/4hrVitLO1yr7tCKppIaA6fIsKoU>
Cc: "Dan (Dan) Romascanu" <dromasca@avaya.com>, "Haynes, Dan" <dhaynes@mitre.org>, "sacm@ietf.org" <sacm@ietf.org>
Subject: Re: [sacm] Consensus Call: Choosing an IM Expression Syntax
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Jan 2016 21:37:51 -0000

Thanks to everyone for chiming in.  After getting some additional opinions on the IPFIX option and conferring with Karen, it seems that we should move forward on the rough consensus to an IPFIX-based notation coupled with English to expressing our IM.  If there are issues down the road with this selection, we can work through them at that point.

Right now, we just need to choose and move on.

Kind regards,

Adam



> On Jan 7, 2016, at 1:15 PM, Ira McDonald <blueroofmusic@gmail.com> wrote:
> 
> Hi,
> 
> OK - I'd like to change my vote.
> 
> I like the IPFIX option best.
> 
> Cheers,
> - Ira
> 
> PS - The SUPA spec is well worth reading.  Henk and Danny - recommended for a really
> good treatment of relationships between classes/objects.
> 
> 
> Ira McDonald (Musician / Software Architect)
> Co-Chair - TCG Trusted Mobility Solutions WG
> Chair - Linux Foundation Open Printing WG
> Secretary - IEEE-ISTO Printer Working Group
> Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
> IETF Designated Expert - IPP & Printer MIB
> Blue Roof Music / High North Inc
> http://sites.google.com/site/blueroofmusic <http://sites.google.com/site/blueroofmusic>
> http://sites.google.com/site/highnorthinc <http://sites.google.com/site/highnorthinc>
> mailto: blueroofmusic@gmail.com <mailto:blueroofmusic@gmail.com>
> Winter  579 Park Place  Saline, MI  48176  734-944-0094
> Summer  PO Box 221  Grand Marais, MI 49839  906-494-2434
> 
> 
> On Thu, Jan 7, 2016 at 2:11 PM, Haynes, Dan <dhaynes@mitre.org <mailto:dhaynes@mitre.org>> wrote:
> Thanks for the additional information Dan.  It was exactly what I was looking for.
> 
> Given that, my preferences are as follows:
> 
> 1) Option 6 (IPFIX)
> 2) Option 1 or Option 2
> 3) Option 5
> 4) Option 3 or Option 4
> 
> Thanks,
> 
> Danny
> 
> -----Original Message-----
> From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com <mailto:dromasca@avaya.com>]
> Sent: Thursday, January 07, 2016 10:39 AM
> To: Haynes, Dan <dhaynes@mitre.org <mailto:dhaynes@mitre.org>>; sacm@ietf.org <mailto:sacm@ietf.org>
> Subject: RE: [sacm] Consensus Call: Choosing an IM Expression Syntax
> 
> Hi Dan,
> 
> See in-line.
> 
> DanR
> 
> > -----Original Message-----
> > From: Haynes, Dan [mailto:dhaynes@mitre.org <mailto:dhaynes@mitre.org>]
> > Sent: Thursday, January 07, 2016 4:37 PM
> > To: Romascanu, Dan (Dan); sacm@ietf.org <mailto:sacm@ietf.org>
> > Subject: RE: [sacm] Consensus Call: Choosing an IM Expression Syntax
> >
> > Hi Dan,
> >
> > Regarding the IPFIX option, I think you were referring to RFC7012
> > (https://www.rfc-editor.org/rfc/rfc7012.txt <https://www.rfc-editor.org/rfc/rfc7012.txt> ) correct?
> >
> 
> Of course - sorry for the confusion, thanks for catching it.
> 
> > Just to clarify, are you advocating for defining a set of fields that
> > are required for SACM's IM elements and then defining the IM elements
> > in terms of those fields?  Or, are you more specifically suggesting
> > that we should just use the fields listed in the document (name,
> > elementID, description, datatype, etc.)?
> >
> 
> I was thinking first of all about the Syntax - that's what the Consensus Call is about.
> 
> Leveraging  already defined fields, naming conventions may be an extra advantage but not essential IMO.
> 
> > With that said, I think this format could work well for defining
> > attributes in SACM and it seems pretty easy to work with.  We could
> > probably also leverage many of their naming conventions, etc. and save
> > some more time :).  However, I did not see any examples of compound IM
> > elements that were made up of multiple IM elements defined using this
> > format.  An example from SACM might be a network interface that
> > consists of an IP address, MAC address, flags, etc.  Are there any
> > examples of this (I may have looked in the wrong place)?  Is it
> > something that we would have to figure out and decide on?  Or, is it
> > just something that is addressed at the data model level?  That is,
> > the SACM IM will define the attributes, but, the data models are free
> > to combine them as they see fit (i.e. a data model could decide
> > whether or not they wanted to create a network interface construct that ties together a bunch of attributes).
> >
> 
> IPFIX has several levels of complexity which were developed in successive phases. There is no DM and initially data records were sent as flat lists. This started soon to be seen as a limitation, and RFC 6313 (https://www.rfc-editor.org/rfc/rfc6313.txt <https://www.rfc-editor.org/rfc/rfc6313.txt>) defined the Structured Data IEs to deal with the more complex cases. (see in section 2.3 the example of an IDS mentioned as use case).
> 
> Regards,
> 
> Dan
> 
> 
> _______________________________________________
> sacm mailing list
> sacm@ietf.org <mailto:sacm@ietf.org>
> https://www.ietf.org/mailman/listinfo/sacm <https://www.ietf.org/mailman/listinfo/sacm>
> 
> _______________________________________________
> sacm mailing list
> sacm@ietf.org
> https://www.ietf.org/mailman/listinfo/sacm