Skip to main content

The Common Log File (CLF) format for the Session Initiation Protocol (SIP)
draft-gurbani-sipping-clf-01

Document Type Expired Internet-Draft (individual)
Authors Vijay K. Gurbani , Eric Burger , Tricha Anjali , Humberto Abdelnur , Olivier Festor
Last updated 2009-03-09
Stream (None)
Intended RFC status (None)
Formats
Expired & archived
plain text html xml htmlized pdfized bibtex
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)
This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at:
https://www.ietf.org/archive/id/draft-gurbani-sipping-clf-01.txt

Abstract

Well-known web servers such as Apache and web proxies like Squid support event logging using a common log format. The logs produced using these de-facto standard formats are invaluable to system administrators for trouble-shooting a server and tool writers to craft tools that mine the log files and produce reports and trends. Furthermore, these log files can also be used to train anomaly detection systems and feed events into a security event management system. The Session Initiation Protocol does not have a common log format, and as a result, each server supports a distinct log format that makes it unnecessarily complex to produce tools to do trend analysis and security detection. We propose a common log file format for SIP servers that can be used uniformly for proxies, registrars, redirect servers as well as back-to-back user agents.

Authors

Vijay K. Gurbani
Eric Burger
Tricha Anjali
Humberto Abdelnur
Olivier Festor

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)