The Common Log Format (CLF) for the Session Initiation Protocol (SIP) - draft-gurbani-sipclf-problem-statement-01

Gurbani Vijay Burger Eric T. Anjali Humberto Abdelnur 1 Olivier Festor 1
1 MADYNES - Management of dynamic networks and services
INRIA Lorraine, LORIA - Laboratoire Lorrain de Recherche en Informatique et ses Applications
Abstract : Well-known web servers such as Apache and web proxies like Squid support event logging using a common log format. The logs produced using these de-facto standard formats are invaluable to system administrators for trouble-shooting a server and tool writers to craft tools that mine the log files and produce reports and trends. Furthermore, these log files can also be used to train anomaly detection systems and feed events into a security event management system. The Session Initiation Protocol does not have a common log format, and as a result, each server supports a distinct log format that makes it unnecessarily complex to produce tools to do trend analysis and security detection. We propose a common log file format for SIP servers that can be used uniformly by proxies, registrars, redirect servers as well as back-to-back user agents.
Type de document :
Autre publication
Draft. 2010
Liste complète des métadonnées
Contributeur : Olivier Festor <>
Soumis le : mardi 14 décembre 2010 - 11:46:13
Dernière modification le : jeudi 11 janvier 2018 - 06:19:50


  • HAL Id : inria-00546437, version 1



Gurbani Vijay, Burger Eric, T. Anjali, Humberto Abdelnur, Olivier Festor. The Common Log Format (CLF) for the Session Initiation Protocol (SIP) - draft-gurbani-sipclf-problem-statement-01. Draft. 2010. 〈inria-00546437〉



Consultations de la notice