[sip-clf] Large log elements

Peter Musgrave <peter.musgrave@magorcorp.com> Wed, 04 August 2010 11:50 UTC

Return-Path: <peter.musgrave@magorcorp.com>
X-Original-To: sip-clf@core3.amsl.com
Delivered-To: sip-clf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9D6243A69A3 for <sip-clf@core3.amsl.com>; Wed, 4 Aug 2010 04:50:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.158
X-Spam-Level:
X-Spam-Status: No, score=-2.158 tagged_above=-999 required=5 tests=[AWL=-0.181, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N1FqBaEcHAwz for <sip-clf@core3.amsl.com>; Wed, 4 Aug 2010 04:50:38 -0700 (PDT)
Received: from mail-qy0-f179.google.com (mail-qy0-f179.google.com [209.85.216.179]) by core3.amsl.com (Postfix) with ESMTP id B27503A6824 for <sip-clf@ietf.org>; Wed, 4 Aug 2010 04:50:38 -0700 (PDT)
Received: by qyk8 with SMTP id 8so3861149qyk.10 for <sip-clf@ietf.org>; Wed, 04 Aug 2010 04:51:08 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.224.82.3 with SMTP id z3mr3681728qak.345.1280922667732; Wed, 04 Aug 2010 04:51:07 -0700 (PDT)
Received: by 10.229.34.14 with HTTP; Wed, 4 Aug 2010 04:51:07 -0700 (PDT)
Date: Wed, 04 Aug 2010 07:51:07 -0400
Message-ID: <AANLkTikuusZVLS63rq4jj6j8PeRVq9Wpdjr40HRGUtVk@mail.gmail.com>
From: Peter Musgrave <peter.musgrave@magorcorp.com>
To: List SIP-CLF Mailing <sip-clf@ietf.org>
Content-Type: text/plain; charset="ISO-8859-1"
Subject: [sip-clf] Large log elements
X-BeenThere: sip-clf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SIP Common Log File format discussion list <sip-clf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sip-clf>
List-Post: <mailto:sip-clf@ietf.org>
List-Help: <mailto:sip-clf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sip-clf>, <mailto:sip-clf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Aug 2010 11:50:39 -0000

Hi all,

In the Maastrichct session the issue of large headers came up.

The example specifically cited by Robert Sparks was a request URI
which could have a body in it - so even in the case of mandatory
logged elements there can be very large entries.

Do we wish to dictate a maximum element size for the purposes of
logging? Should this be in the problem statement?

Regards,

Peter Musgrave
(as co-chair)