
Received: from co300216-co-outbound.avaya.com (co300216-co-outbound.net.avaya.com [198.152.13.100]) by bierator.ibr.cs.tu-bs.de (8.13.4/8.13.4/Debian-3sarge3) with ESMTP id l9NFbn7g028329 for <nmrg@ibr.cs.tu-bs.de>; Tue, 23 Oct 2007 17:37:55 +0200
X-IronPort-AV: E=Sophos;i="4.21,318,1188792000"; d="scan'208";a="77303351"
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by co300216-co-outbound.avaya.com with ESMTP; 23 Oct 2007 11:37:43 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: RE: [nmrg] Re: snmp trace analysis meeting
Date: Tue, 23 Oct 2007 17:37:07 +0200
Message-ID: <EDC652A26FB23C4EB6384A4584434A045265EB@307622ANEX5.global.avaya.com>
In-Reply-To: <20071023152637.GA10776@elstar.local>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [nmrg] Re: snmp trace analysis meeting
Thread-Index: AcgViWodJtfG4/vQS1eQFM6EWC2HnAAAEYgg
References: <20070917145448.GA20557@elstar.local><20071023142939.GF10354@elstar.local><EDC652A26FB23C4EB6384A4584434A045265C6@307622ANEX5.global.avaya.com> <20071023152637.GA10776@elstar.local>
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: <j.schoenwaelder@jacobs-university.de>
X-IBRFilter-SpamReport: 0.001 () BAYES_50
X-Scanned-By: MIMEDefang 2.51 on 134.169.34.9
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by bierator.ibr.cs.tu-bs.de id l9NFbn7g028329
Cc: nmrg@ibr.cs.tu-bs.de
X-BeenThere: nmrg@ibr.cs.tu-bs.de
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Network Management Research Group <nmrg.ibr.cs.tu-bs.de>
List-Unsubscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=unsubscribe>
List-Archive: <http://mail.ibr.cs.tu-bs.de/pipermail/nmrg>
List-Post: <mailto:nmrg@ibr.cs.tu-bs.de>
List-Help: <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=help>
List-Subscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=subscribe>
X-List-Received-Date: Tue, 23 Oct 2007 15:37:59 -0000

I certainly would not want to interfere with a group of folks who want
to meet in order to do useful work! Please go ahead with your plans and
name the meeting whatever you want or need to call it in order to make
it happen. I was merely excusing myself. I suggest however to have
somebody report in the OPS area open meeting in Vancouver about the
meeting (workshop). 

Dan


 
 

> -----Original Message-----
> From: nmrg-bounces@ibr.cs.tu-bs.de 
> [mailto:nmrg-bounces@ibr.cs.tu-bs.de] On Behalf Of Juergen 
> Schoenwaelder
> Sent: Tuesday, October 23, 2007 5:27 PM
> To: Romascanu, Dan (Dan)
> Cc: nmrg@ibr.cs.tu-bs.de
> Subject: Re: [nmrg] Re: snmp trace analysis meeting
> 
> On Tue, Oct 23, 2007 at 05:11:07PM +0200, Romascanu, Dan (Dan) wrote:
>  
> > I see that this is now announced as a NMRG meeting, while 
> the previous 
> > message in September was talking about a workshop and using 
> > conditional mode. When was the announcement for this meeting sent?
> 
> Oh, we can call this a workshop if that helps. ;-) In fact, 
> the wording in the original message sent out on September 
> 17th was not very precise so this is indeed my fault 
> (although I meant it to be a joint NMRG meeting / EMANICS WP7 
> workshop from the beginning I obviously confused the terminology).
> 
> > Today is well beyond the usual 30 days announcement window for the 
> > IETF activities.  Maybe the IRTF research groups need not 
> conform to 
> > this rule, I do not know.
> 
> RFC 2014 is actually silent about this. I know this 30 days 
> rule exists for IETF meetings - but where is this actually 
> stated? RFC 2026 does not say this so it must be somewhere 
> else. (I am just curious what the precise language is and 
> whether it applies - if it does, we probably have to kill this event.)
> 
> > In any case I cannot make it to the meeting on such short notice.
> > Other people may be in the same situation. Did you consider 
> having a 
> > meeting at the IETF meeting in Vancouver instead?
> 
> The problem is that most people actively working on things 
> are located in Europe and there is no way to fly them all 
> over to Vancouver. And then it is difficult or expensive to 
> actually get 1.5 days of meeting time next to an IETF meeting.
> 
> My idea is to get some work done in Enschede and then to 
> report at one of the subsequent IETFs using a shorter IETF 
> session slot the major outcome of this work (if there is 
> any). This seemed to have worked in the recent past.
> 
> /js
> 
> -- 
> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
> Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>
> --
> !! This message is brought to you via the `nmrg' mailing list.
> !! Please do not reply to this message to unsubscribe. To 
> unsubscribe or adjust !! your settings, send a mail message 
> to <nmrg-request@ibr.cs.tu-bs.de> !! or look at 
> https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg.
> 



Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by bierator.ibr.cs.tu-bs.de (8.13.4/8.13.4/Debian-3sarge3) with ESMTP id l9NFR0dI026691 for <nmrg@ibr.cs.tu-bs.de>; Tue, 23 Oct 2007 17:27:05 +0200
Received: from localhost (demetrius.jacobs-university.de [212.201.44.32]) by hermes.jacobs-university.de (Postfix) with ESMTP id D599F8A0D3; Tue, 23 Oct 2007 17:27:00 +0200 (CEST)
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id 16686-01-12; Tue, 23 Oct 2007 17:26:56 +0200 (CEST)
Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 9825389DD8; Tue, 23 Oct 2007 17:26:37 +0200 (CEST)
Received: by elstar.local (Postfix, from userid 501) id 401933A4B03; Tue, 23 Oct 2007 17:26:37 +0200 (CEST)
Date: Tue, 23 Oct 2007 17:26:37 +0200
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
Subject: Re: [nmrg] Re: snmp trace analysis meeting
Message-ID: <20071023152637.GA10776@elstar.local>
Mail-Followup-To: "Romascanu, Dan (Dan)" <dromasca@avaya.com>, nmrg@ibr.cs.tu-bs.de
References: <20070917145448.GA20557@elstar.local> <20071023142939.GF10354@elstar.local> <EDC652A26FB23C4EB6384A4584434A045265C6@307622ANEX5.global.avaya.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <EDC652A26FB23C4EB6384A4584434A045265C6@307622ANEX5.global.avaya.com>
User-Agent: Mutt/1.5.16 (2007-06-09)
X-Virus-Scanned: amavisd-new 2.3.3 (20050822) at jacobs-university.de
X-IBRFilter-SpamReport: -1.096 () BAYES_40
X-Scanned-By: MIMEDefang 2.51 on 134.169.34.9
Cc: nmrg@ibr.cs.tu-bs.de
X-BeenThere: nmrg@ibr.cs.tu-bs.de
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: j.schoenwaelder@jacobs-university.de
List-Id: Network Management Research Group <nmrg.ibr.cs.tu-bs.de>
List-Unsubscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=unsubscribe>
List-Archive: <http://mail.ibr.cs.tu-bs.de/pipermail/nmrg>
List-Post: <mailto:nmrg@ibr.cs.tu-bs.de>
List-Help: <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=help>
List-Subscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=subscribe>
X-List-Received-Date: Tue, 23 Oct 2007 15:27:07 -0000

On Tue, Oct 23, 2007 at 05:11:07PM +0200, Romascanu, Dan (Dan) wrote:
 
> I see that this is now announced as a NMRG meeting, while the
> previous message in September was talking about a workshop and using
> conditional mode. When was the announcement for this meeting sent?

Oh, we can call this a workshop if that helps. ;-) In fact, the
wording in the original message sent out on September 17th was not
very precise so this is indeed my fault (although I meant it to be a
joint NMRG meeting / EMANICS WP7 workshop from the beginning I
obviously confused the terminology).

> Today is well beyond the usual 30 days announcement window for the
> IETF activities.  Maybe the IRTF research groups need not conform to
> this rule, I do not know.

RFC 2014 is actually silent about this. I know this 30 days rule
exists for IETF meetings - but where is this actually stated? RFC 2026
does not say this so it must be somewhere else. (I am just curious
what the precise language is and whether it applies - if it does, we
probably have to kill this event.)

> In any case I cannot make it to the meeting on such short notice.
> Other people may be in the same situation. Did you consider having a
> meeting at the IETF meeting in Vancouver instead?

The problem is that most people actively working on things are located
in Europe and there is no way to fly them all over to Vancouver. And
then it is difficult or expensive to actually get 1.5 days of meeting
time next to an IETF meeting.

My idea is to get some work done in Enschede and then to report at one
of the subsequent IETFs using a shorter IETF session slot the major
outcome of this work (if there is any). This seemed to have worked in
the recent past.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>


Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) by bierator.ibr.cs.tu-bs.de (8.13.4/8.13.4/Debian-3sarge3) with ESMTP id l9NFC7vZ024466 for <nmrg@ibr.cs.tu-bs.de>; Tue, 23 Oct 2007 17:12:12 +0200
X-IronPort-AV: E=Sophos;i="4.21,317,1188792000"; d="scan'208";a="68011660"
Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by de307622-de-outbound.net.avaya.com with ESMTP; 23 Oct 2007 11:12:01 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: RE: [nmrg] Re: snmp trace analysis meeting
Date: Tue, 23 Oct 2007 17:11:07 +0200
Message-ID: <EDC652A26FB23C4EB6384A4584434A045265C6@307622ANEX5.global.avaya.com>
In-Reply-To: <20071023142939.GF10354@elstar.local>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [nmrg] Re: snmp trace analysis meeting
Thread-Index: AcgVgXRgJZ9HfbkjRpy8Gc1URm9qHAABH6qw
References: <20070917145448.GA20557@elstar.local> <20071023142939.GF10354@elstar.local>
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: <j.schoenwaelder@jacobs-university.de>, <nmrg@ibr.cs.tu-bs.de>
X-IBRFilter-SpamReport: -1.096 () BAYES_40
X-Scanned-By: MIMEDefang 2.51 on 134.169.34.9
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by bierator.ibr.cs.tu-bs.de id l9NFC7vZ024466
X-BeenThere: nmrg@ibr.cs.tu-bs.de
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Network Management Research Group <nmrg.ibr.cs.tu-bs.de>
List-Unsubscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=unsubscribe>
List-Archive: <http://mail.ibr.cs.tu-bs.de/pipermail/nmrg>
List-Post: <mailto:nmrg@ibr.cs.tu-bs.de>
List-Help: <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=help>
List-Subscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=subscribe>
X-List-Received-Date: Tue, 23 Oct 2007 15:12:15 -0000

Juergen,

I see that this is now announced as a NMRG meeting, while the previous
message in September was talking about a workshop and using conditional
mode. When was the announcement for this meeting sent? Today is well
beyond the usual 30 days announcement window for the IETF activities.
Maybe the IRTF research groups need not conform to this rule, I do not
know. In any case I cannot make it to the meeting on such short notice.
Other people may be in the same situation. Did you consider having a
meeting at the IETF meeting in Vancouver instead? 

Dan
 
 

> -----Original Message-----
> From: nmrg-bounces@ibr.cs.tu-bs.de 
> [mailto:nmrg-bounces@ibr.cs.tu-bs.de] On Behalf Of Juergen 
> Schoenwaelder
> Sent: Tuesday, October 23, 2007 4:30 PM
> To: nmrg@ibr.cs.tu-bs.de
> Subject: [nmrg] Re: snmp trace analysis meeting
> 
> On Mon, Sep 17, 2007 at 04:54:48PM +0200, Juergen Schoenwaelder wrote:
> > Hi,
> > 
> > despite the lack of progress on the measurement ID, there are 
> > continued efforts to collect additional SNMP traces and to do some 
> > more advanced analysis on the collected traces:
> > 
> > 1) Folks at the University of Twente have been working recently on
> >    algorithms to extract the non-periodic traffic out of SNMP traces
> >    (the more interesting stuff hidden in the periodic polls).
> > 
> > 2) Folks at Jacobs University have tried to identify table retrieval
> >    algorithms used by management applications.
> > 
> > 3) Folks at PSNC have applied some of the analysis tools and
> >    techniques to their networks and developed some further 
> ideas what
> >    to look for in the collected traces.
> > 
> > In order to discuss ongoing trace analysis work and to 
> identify a core 
> > set of common definitions or metrics, it was suggested to 
> hold a two 
> > day workshop on November 8-9 2007, hosted by the University 
> of Twente 
> > in Enschede, Netherlands. This workshop would be sponsored by the 
> > European EMANICS project.
> > 
> > Please send comments about this proposal to this list. If 
> you plan to 
> > attend such a workshop, please also drop me a note.
> 
> I got some private requests and I started to create an agenda 
> for the proposed meeting. It is available from the NMRG web pages:
> 
> http://www.ibr.cs.tu-bs.de/projects/nmrg/meetings/2007/enschede/
> 
> This is still subject to change as we are finalizing some 
> more topics/ideas. The first day, we will collect some 
> reports about what people are doing related to the Internet 
> management framework and in particular to SNMP trace 
> analysis. During the second day, we try to work out common 
> metrics and terminology for SNMP trace analysis.
> 
> We are still open for additional topics and people to attend 
> the meeting.
> 
> /js
> 
> -- 
> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
> Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>
> --
> !! This message is brought to you via the `nmrg' mailing list.
> !! Please do not reply to this message to unsubscribe. To 
> unsubscribe or adjust !! your settings, send a mail message 
> to <nmrg-request@ibr.cs.tu-bs.de> !! or look at 
> https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg.
> 



Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by bierator.ibr.cs.tu-bs.de (8.13.4/8.13.4/Debian-3sarge3) with ESMTP id l9NETi4o017651 for <nmrg@ibr.cs.tu-bs.de>; Tue, 23 Oct 2007 16:29:49 +0200
Received: from localhost (demetrius.jacobs-university.de [212.201.44.32]) by hermes.jacobs-university.de (Postfix) with ESMTP id 023228506F for <nmrg@ibr.cs.tu-bs.de>; Tue, 23 Oct 2007 16:29:44 +0200 (CEST)
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id 10154-07; Tue, 23 Oct 2007 16:29:39 +0200 (CEST)
Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 86E6C87C50; Tue, 23 Oct 2007 16:29:39 +0200 (CEST)
Received: by elstar.local (Postfix, from userid 501) id 245F03A46CD; Tue, 23 Oct 2007 16:29:39 +0200 (CEST)
Date: Tue, 23 Oct 2007 16:29:39 +0200
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: nmrg@ibr.cs.tu-bs.de
Message-ID: <20071023142939.GF10354@elstar.local>
Mail-Followup-To: nmrg@ibr.cs.tu-bs.de
References: <20070917145448.GA20557@elstar.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20070917145448.GA20557@elstar.local>
User-Agent: Mutt/1.5.16 (2007-06-09)
X-Virus-Scanned: amavisd-new 2.3.3 (20050822) at jacobs-university.de
X-IBRFilter-SpamReport: -2.599 () BAYES_00
X-Scanned-By: MIMEDefang 2.51 on 134.169.34.9
Subject: [nmrg] Re: snmp trace analysis meeting
X-BeenThere: nmrg@ibr.cs.tu-bs.de
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: j.schoenwaelder@jacobs-university.de
List-Id: Network Management Research Group <nmrg.ibr.cs.tu-bs.de>
List-Unsubscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=unsubscribe>
List-Archive: <http://mail.ibr.cs.tu-bs.de/pipermail/nmrg>
List-Post: <mailto:nmrg@ibr.cs.tu-bs.de>
List-Help: <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=help>
List-Subscribe: <https://mail.ibr.cs.tu-bs.de/mailman/listinfo/nmrg>, <mailto:nmrg-request@ibr.cs.tu-bs.de?subject=subscribe>
X-List-Received-Date: Tue, 23 Oct 2007 14:29:53 -0000

On Mon, Sep 17, 2007 at 04:54:48PM +0200, Juergen Schoenwaelder wrote:
> Hi,
> 
> despite the lack of progress on the measurement ID, there are
> continued efforts to collect additional SNMP traces and to do some
> more advanced analysis on the collected traces:
> 
> 1) Folks at the University of Twente have been working recently on
>    algorithms to extract the non-periodic traffic out of SNMP traces
>    (the more interesting stuff hidden in the periodic polls).
> 
> 2) Folks at Jacobs University have tried to identify table retrieval
>    algorithms used by management applications.
> 
> 3) Folks at PSNC have applied some of the analysis tools and
>    techniques to their networks and developed some further ideas what
>    to look for in the collected traces.
> 
> In order to discuss ongoing trace analysis work and to identify a core
> set of common definitions or metrics, it was suggested to hold a two
> day workshop on November 8-9 2007, hosted by the University of Twente
> in Enschede, Netherlands. This workshop would be sponsored by the
> European EMANICS project.
> 
> Please send comments about this proposal to this list. If you plan to
> attend such a workshop, please also drop me a note.

I got some private requests and I started to create an agenda for the
proposed meeting. It is available from the NMRG web pages:

http://www.ibr.cs.tu-bs.de/projects/nmrg/meetings/2007/enschede/

This is still subject to change as we are finalizing some more
topics/ideas. The first day, we will collect some reports about what
people are doing related to the Internet management framework and in
particular to SNMP trace analysis. During the second day, we try to
work out common metrics and terminology for SNMP trace analysis.

We are still open for additional topics and people to attend the
meeting.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>

