From majordomo@mil.doit.wisc.edu  Fri Apr  1 09:09:54 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA28249
	for <ipfix-archive@lists.ietf.org>; Fri, 1 Apr 2005 09:09:53 -0500 (EST)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DHMTv-0001U6-00
	for ipfix-list@mil.doit.wisc.edu; Fri, 01 Apr 2005 07:46:39 -0600
Received: from p-mail1.rd.francetelecom.com ([195.101.245.15])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DHMTu-0001U0-00
	for ipfix@net.doit.wisc.edu; Fri, 01 Apr 2005 07:46:39 -0600
Received: from ftrdmel1.rd.francetelecom.fr ([10.193.117.152]) by ftrdsmtp2.rd.francetelecom.fr with Microsoft SMTPSVC(6.0.3790.211);
	 Fri, 1 Apr 2005 15:45:25 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: [ipfix] Common IPFIX and PSAMP info model and delta timestamp
Date: Fri, 1 Apr 2005 15:45:24 +0200
Message-ID: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1F97904@ftrdmel1.rd.francetelecom.fr>
Thread-Topic: Common IPFIX and PSAMP info model and delta timestamp
Thread-Index: AcU13GVXouJJ5fywTHOtQyxxoY8/CAAJLrSg
From: "STEPHAN Emile RD-CORE-LAN" <emile.stephan@francetelecom.com>
To: "Benoit Claise" <bclaise@cisco.com>,
        "Juergen Quittek" <quittek@netlab.nec.de>
Cc: <ipfix@net.doit.wisc.edu>
X-OriginalArrivalTime: 01 Apr 2005 13:45:25.0832 (UTC) FILETIME=[0F023C80:01C536C1]
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: quoted-printable

Hi Benoit and Juergen,

It is not exact that "we still have to work on PSAMP information model". =
During the discussion in PSAMP and in IPFIX I proposed to start this =
effort now. Chairs responded that as WGs are behind the schedule there =
was no time for this point.=20

As PSAMP use IPFIX protocol to export packets information, as delta =
timetamping is crucial for both WGs it is clear that this issue should =
be solved not only for microsecond but for millisecond and nanosecond =
too. As PSAMP uses IPFIX protocol and IPFIX info model framework and =
field types, there is no doubt that this point has to be addressed =
before their WG LC.

The best way consists in introducing the notion of Data Set Scope in =
regular templates and to use the 'Scope Field count' (preferable as a =
field type 'ScopeFieldNumber') to identify the fields that are either =
only present in the first record (last proposal) or that have a =
different subtype in the fist record than in the others (first and =
preferred proposal because record keep the same # of fields).=20

This proposal has many benefits. It works for millisecond, microsecond =
and nanosecond; it will work for counters too. It simplifies the =
protocol because Template and Option Templates use the same format. =
Delta timestamping introduces no more side effects between the metering =
entity and the exporter. The meaning and the unit of the field "export =
time" of the header of the message does not change with implementations.


Regards
Emile

> -----Message d'origine-----
> De=A0: Benoit Claise [mailto:bclaise@cisco.com]
> Envoy=E9=A0: jeudi 31 mars 2005 12:28
> =C0=A0: STEPHAN Emile RD-CORE-LAN
> Cc=A0: Lutz Mark; Juergen Quittek; ippm@ietf.org; =
ipfix@net.doit.wisc.edu
> Objet=A0: Re: Common templates for exporting measurement results and
> middlebox metrics
>=20
> Hi Emile,
>=20
> >Hi Benoit,
> >
> >It is clear that IPFIX is suitable to export binary data such as
> measurement results (either active or passive).
> >
> >Having common templates and clear metrics definitions is the only way =
to
> increase the usability, interoperability and the scalability of the
> collecting part of measurement systems.
> >
> >
> Agreed on the clear metrics definitions, this is the IPPM WG job.
> Regarding the common templates, I'm more in favor of letting the user
> export what they need with a flexible export mechanism such as IPFIX.
> Imposing the templates is not the right approach. We tried that with
> NetFlow version 5: it doesn't scale when you have new Information
> Elements. Therefore NetFlow version 9 was created. Note for the IPPM
> users: IPFIX is based on NetFlow version 9.
>=20
> >Templates:
> >----------
> >
> >Nevertheless there are at least 3 issues with the current version of
> IPFIX:
> >	Field Types SampleID, metricID are missing;
> >
> >
> SampleId is a typical PSAMP field that will be specified in the
> information model. See the selectorID ... unless I misunderstood what
> you meant with SampleID. Maybe you mean a hash value? Again it will
> defined part of PSAMP.
>=20
> >	The current delta timestamp computation is not applicable to measure
> related to delay or jitter;
> >
> >
> >	Templates are not defined;
> >
> >
> See my point above.
>=20
> >That fully motivates the first I-D "common templates for exporting
> measure results". It will fully specify the templates to export active =
and
> passive measurement result;
> >
> >Metrics:
> >--------
> >
> >draft-ietf-ipfix-as-04.txt presents several usages for IPFIX. One of =
them
> consists in using PSAMP technique to measure IPPM metrics. =
Unfortunately
> the current IPPM metrics definitions are not directly applicable to =
this
> technique. They must be adapted to routers and middlebox.
> >
> >This is clearly the intent of the second I-D "traceroute and =
middlebox
> metrics". Each section defining a metric will discuss measurement =
issues
> related to the measure, the reporting... as RFC2679-80 do.
> >
> >
> >IPFIX Info Model:
> >-----------------
> >
> >I explained in the last PSAMP meeting (discussion related to =
draft-pohl-
> perpktinfo-02.txt) that we have to identify the few field types needed =
in
> the info model. What about basically adding PacketID, SampleID, =
metricID
> and MeasureID in the IPFIX info model?
> >
> >
> We still have to work on the PSAMP information model
>=20
> >
> >IPFIX Protocol:
> >---------------
> >
> >Regarding measurement result, delta timestamping is the major issue. =
The
> current approach is not applicable to measurement results and does not
> conform to the IPFIX architecture. I proposed yesterday a solution.
> >
> I replied to it. Let's keep 2 separate threads (BTW, I still don't
> understand why it doesn't conform to the IPFIX architecture)
>=20
> Regards, Benoit.
>=20
> >What is the opinion of the WG fellows on this proposal?
> >
> >
> >Regards
> >Emile
> >
> >-----Message d'origine-----
> >De : Benoit Claise [mailto:bclaise@cisco.com]
> >Envoy=E9 : mercredi 30 mars 2005 23:30
> >=C0 : STEPHAN Emile RD-CORE-LAN
> >Cc : Juergen Quittek; Lutz Mark; ippm@ietf.org; =
ipfix@net.doit.wisc.edu
> >Objet : Re: [ipfix] RE: [ippm] traceroute as WG work item? IPFIX
> traceroute records
> >
> >Emile,
> >
> >If there is a need to push some IPPM data to a NMS (as opposed to =
pull
> >the data with SNMP), then the IPFIX protocol makes perfect sense as =
it
> >is efficient and flexible.
> >BTW, this is described in the IPFIX applicability draft
> >(http://www.ietf.org/internet-drafts/draft-ietf-ipfix-as-04.txt)
> >
> >    2.7  SLA validation...........................................8
> >    2.8  Traffic Monitoring.......................................8
> >    2.8.1 Measurement of Round-trip-time (RTT)....................9
> >    2.8.2 Measurement of One-way-delay (OWD)......................9
> >    2.8.3 Measurement of One-way-loss (OWL)......................10
> >    2.8.4 Measurement of IP delay variation (IPDV)...............10
> >    3.3 IPFIX and IPPM
> >
> >Note that this draft speaks of passive measurements as opposed to =
active
> measurements in IPPM.
> >However, from the pure IPFIX protocol point of view, the measurement
> mechanism is not relevant.
> >
> >Regards, Benoit.
> >
> >
> >
> >>Hi Juergen and Lutz
> >>
> >>What we experienced with the IPPM MIB is that measures generate a =
lot of
> data. So the binary format is the best for collecting.
> >>
> >>Traceroute Field Types do not differ from Per Packet Field Types =
(draft-
> pohl-perpktinfo-02.txt) or from IPPM Field Types, especially if we =
include
> spatial and multicast metrics =
(dratf-stephan-ippm-multimetrics-00.txt).
> >>
> >>Moreover most of these fields are already defined as illustrated by =
the
> example I sent. So it appears very fast and very easy to define in =
IPFIX a
> common info model and a common set of templates to export results of =
IPPM
> measures, traceroute measures and 'Per Packet' measures.
> >>
> >>Regarding traceroute metric I propose to try to design this metric =
using
> the IPPM framework and terminology (RFC2330), and then to present it =
to
> the IPPM WG. At large this document may include metrics definitions of
> middlebox one-way delay and jitter corresponding to 'Per Packet'
> measurement technique.
> >>
> >>To sum up I propose to write 2 drafts:
> >>	The fist one defines in the IPFIX WG common templates for exporting
> measure results;
> >>	The second one defines in the IPPM WG traceroute and middlebox
> metrics.
> >>
> >>Regards
> >>Emile
> >>
> >>-----Message d'origine-----
> >>De : Juergen Quittek [mailto:quittek@netlab.nec.de]
> >>Envoy=E9 : lundi 28 mars 2005 03:06
> >>=C0 : STEPHAN Emile RD-CORE-LAN
> >>Cc : ippm@ietf.org; ipfix@net.doit.wisc.edu
> >>Objet : RE: [ippm] traceroute as WG work item? IPFIX traceroute =
records
> >>
> >>Emile,
> >>
> >>Thanks for your comments!
> >>
> >>The basic issue I raised was whether or not the standardization
> >>of an information model and data model for traceroute results would
> >>be a work item for the IPPM WG.
> >>
> >>Do I understand correctly from your message that,
> >> 1. yes, it should be standardized,
> >> 2. but not necessarily in the IPPM WG?
> >>
> >>Concerning the discussion at IPPM whether we should use a binary
> >>or an XML-based format for traceroute results, I interpret your
> >>message as support for a binary format.
> >>
> >>I think your thoughts open an interesting discussion on transmitting
> >>traceroute results in IPFIX records.  Probably, this issue is worth
> >>mentioning it in the IPFIX applicability statement.
> >>
> >>Also, the issue should be considered by the information model
> discussions
> >>in IPFIX and PSAMP.
> >>
> >>Thanks,
> >>
> >>   Juergen
> >>
> >>
> >>
> >>


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Sat Apr  2 09:27:44 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA24951
	for <ipfix-archive@lists.ietf.org>; Sat, 2 Apr 2005 09:27:44 -0500 (EST)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DHjEE-0005Fy-00
	for ipfix-list@mil.doit.wisc.edu; Sat, 02 Apr 2005 08:03:58 -0600
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DHjED-0005Ft-00
	for ipfix-protocol@net.doit.wisc.edu; Sat, 02 Apr 2005 08:03:57 -0600
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j32E3uM27752
	for <ipfix-protocol@net.doit.wisc.edu>; Sat, 2 Apr 2005 16:03:56 +0200 (CEST)
Received: from [10.61.80.26] (ams-clip-vpn-dhcp4123.cisco.com [10.61.80.26])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j32E3sK13803
	for <ipfix-protocol@net.doit.wisc.edu>; Sat, 2 Apr 2005 16:03:54 +0200 (CEST)
Message-ID: <424EA649.1010405@cisco.com>
Date: Sat, 02 Apr 2005 16:03:53 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-protocol@net.doit.wisc.edu
Subject: [ipfix-protocol] new version of the IPFIX protocol draft: draft-ietf-ipfix-protocol-11.txt
Content-Type: multipart/alternative;
 boundary="------------080804040808030701080505"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------080804040808030701080505
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Dear all,

I just posted a new version of IPFIX protocol draft.
I've addressed all the remaining issues.

- "Should  there be any apparent discrepancy in definitions between 
these two documents, the definitions defined in this document take 
precedence." removed
- "The scope is an Information Element specified in the IPFIX 
Information Model [IPFIX-INFO]." added.
- Section "IPFIX Message Header "Export Time" and Flow Record Time" 
rewritten
- "0000 UTC Jan 1st 1970" now specifies the day
-  "Following a configuration change that can modify the interpretation 
of the Data Records (for example, a sampling rate change) a new Template 
ID MUST be used and the old Template ID MUST NOT be reused until its 
lifetime (see section 10.3.7) has expired. "
- "Collecting Process**" section improved wrt to the lifetime.
- "Multiple TCP connections MAY be used to avoid head-of-line between 
different Observation Domains."

Regards, Benoit.






--------------080804040808030701080505
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
Dear all,<br>
<br>
I just posted a new version of IPFIX protocol draft.<br>
I've addressed all the remaining issues.<br>
<br>
- "Should&nbsp; there be any apparent discrepancy in definitions between
these two documents, the definitions defined in this document take
precedence." removed<br>
- "The scope is an Information Element specified in the IPFIX
Information Model [IPFIX-INFO]." added.<br>
- Section "IPFIX Message Header "Export Time" and Flow Record Time"
rewritten<br>
- "0000 UTC Jan 1st 1970" now specifies the day<br>
-&nbsp; "Following a configuration change that can modify the interpretation
of the Data Records (for example, a sampling rate change) a new
Template ID MUST be used and the old Template ID MUST NOT be reused
until its lifetime (see section 10.3.7) has expired. "<br>
- "Collecting Process<strong></strong>" section improved wrt to the
lifetime.<br>
- "Multiple TCP connections MAY be used to avoid head-of-line between
different Observation Domains."<br>
<br>
Regards, Benoit.<br>
<br>
<br>
<span
 style="background: yellow none repeat scroll 0% 50%; -moz-background-clip: initial; -moz-background-origin: initial; -moz-background-inline-policy: initial; font-size: 12pt; color: black; font-weight: normal;"><o:p></o:p></span>
<p class="MsoNormal" style="margin-left: 0.5in;"><br>
<span style="font-family: &quot;Courier New&quot;;"><o:p></o:p></span></p>
<br>
<br>
</body>
</html>

--------------080804040808030701080505--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Sat Apr  2 09:49:59 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA26317
	for <ipfix-archive@lists.ietf.org>; Sat, 2 Apr 2005 09:49:59 -0500 (EST)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DHjc2-0005jT-00
	for ipfix-list@mil.doit.wisc.edu; Sat, 02 Apr 2005 08:28:34 -0600
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DHjc0-0005jO-00
	for ipfix-protocol@net.doit.wisc.edu; Sat, 02 Apr 2005 08:28:32 -0600
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j32ESVY29174;
	Sat, 2 Apr 2005 16:28:31 +0200 (CEST)
Received: from [10.61.80.26] (ams-clip-vpn-dhcp4123.cisco.com [10.61.80.26])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j32ESSK21962;
	Sat, 2 Apr 2005 16:28:29 +0200 (CEST)
Message-ID: <424EAC0C.4070002@cisco.com>
Date: Sat, 02 Apr 2005 16:28:28 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: STEPHAN Emile RD-CORE-LAN <emile.stephan@francetelecom.com>
CC: ipfix-protocol@net.doit.wisc.edu
Subject: [ipfix-protocol] Re: common Template format &  absolute/delta timestamp
References: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr>
In-Reply-To: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr>
Content-Type: multipart/alternative;
 boundary="------------040105010508000506090000"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------040105010508000506090000
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
X-MIME-Autoconverted: from 8bit to quoted-printable by av-tac-bru.cisco.com id j32ESVY29174
Content-Transfer-Encoding: quoted-printable

Hi Emile,

>Hi Benoit
>
>
>You said "
> =20
>
>>If you have different time on the Observation Domain (source ID), and
>>the Exporting Process, a solution is to use the absolute timestamps in
>>the data records.
>>
>>   =20
>>
>"
>
>As defined by the architecture the Source of the 'Data Set' (the meterin=
g point) and the Exporter are separate entities.
>
They could.

> So in most of the cases they have different sources of time (especially=
 if we take in account aggregation points). So, no way, timestamping is a=
 central information element for flows and measurement, and delta timesta=
mping is crucial to save bandwidth.
> =20
>
 Flow Record=20
=20
   A Flow Record contains information about a specific Flow _that was=20
   observed at an Observation Point._  ...

The approach in the draft was: this is also for the case for the time: we=
 take the time at the observation point.

Now, 3 different situations:
1. synchronized time for both the Observation Domain and the Exporter
   -> you could use the absolute time Information Elements in the data re=
cords
      if you want to save some CPU
   -> you could use the delta time Information Elements in the data recor=
ds
      if you want to save some bandwidth
2. non synchronized time for both the Observation Domain and the Exporter=
,
   but very close time (for example: a line card has got 1 sec. extra com=
pared
   to the route processor because it booted a little lit later
   -> you could use the absolute time Information Elements in the data re=
cords
      if you want to save some CPU
   -> you could use the delta time Information Elements in the data recor=
ds
      if you want to save some bandwidth
      In rare condition, you might have a problem if the flow starts just=
 at=20
      the 71 minutes boundary.
3. non synchronized time for both the Observation Domain and the Exporter=
,
   but no very close (for example: longer that 71 minutes).=20
   -> you must use the absolute time Information Elements in the data rec=
ords
   Note: this implies that a mediation device must use the absolute time
         if it doesn't forward directly the data records.

>
>You said "
> =20
>
>>I'm not in favor of this approach as you now have dependencies between
>>Information Elements.
>>I mean that the meaning of the I.E. Y will depend on the meaning of I.E=
. X.
>>If the collector doesn't have the I.E. X in his information model, you
>>can't conclude anything about Y
>>If the application that uses the data records doesn't have the
>>intelligence that there is a relation between those 2 I.E., again this
>>is a problem
>>   =20
>>
>"
>
>The current delta timestamping introduces much more new dependencies tha=
t the one I propose:
>
>Currently values of deltatimestamping IEs are modified by the exporter a=
ccording to a value of a field of the header. It introduces dependencies =
between information blocks separated by 3 different levels ('Message head=
er'.'Data flow sets'.'Data flow set'.'IE value') and managed by different=
 entities.=20
> =20
>
Currently, there is a dependency on the Message Header. All IPFIX=20
collecting process MUST anyway be able to understand it to decode the=20
data records.
With your proposal, there is a dependency between I.E. I think this is=20
worse.

>The current delta timestamping is a new job and a new task for the Expor=
ter. The exporter must be able to identify IEs to re-comptute (So he must=
 know any IE used by the meter: is it its job? what happen is a new one i=
s used by the metering entity?); Moreover as the exporter must re-compute=
 any timestamps there is a risk to overload the exporter (at large comput=
ing take time so when the last one will be computed the "export time" wil=
l have changed...);
> =20
>
Again, if you want to save some CPU on the network element, use the=20
absolute timestamps.

>	=09
>My proposal respects the separation between metering entity and Exporter=
. IE values are not modified and the dependency is managed by the meterin=
g entity inside each 'Data Set'. The Exporter is not impacted. The collec=
tor received 'Data Set' including the reference of time of the delta time=
stamp IEs it carries.=20
> =20
>
We can achieve that right now with absolute time I.E.

Regards, Benoit.

>The dependency comes only from the delta timestamp requirement we have.=20
>
>Regards
>Emile
>
>
> =20
>
>>-----Message d'origine-----
>>De : Benoit Claise [mailto:bclaise@cisco.com]
>>Envoy=E9 : jeudi 31 mars 2005 12:23
>>=C0 : STEPHAN Emile RD-CORE-LAN
>>Cc : Sebastian Zander; Nevil Brownlee; ipfix-protocol@net.doit.wisc.edu=
;
>>Juergen Quittek
>>Objet : Re: common Template format & absolute/delta timestamp
>>
>>Emile,
>>
>>   =20
>>
>>>Hi
>>>
>>>Following is a proposal of a common format for Option Template and
>>>Template which offers 'Flow Data Set' with the capability to carry
>>>absolute time reference and delta timestamps.
>>>
>>>This proposal is fully compatible the semantic and the encoding of
>>>existing templates and data records. An Option Template is defined usi=
ng
>>>the regular Template format: field types are systematically aligned on
>>>32 bits, so enterprise bit detection is much more easy and fast.
>>>
>>>
>>>Common format for Option Template and Template:
>>>-----------------------------------------------
>>>
>>>Option Template format differs from Template format because of the
>>>presence of the field 'Scope Field Count' in the Option Template forma=
t.
>>>So an Option Template may be defined using the Template format if we
>>>define 'Scope Field Count' as a Field Type in the info model.
>>>That will not introduce any ambiguity because a collector uses the val=
ue
>>>of the first field of the template (Set ID =3D 3) to distinguish an Op=
tion
>>>Template from a Template.
>>>
>>>Example:
>>>
>>>We define the field type 'ScopeFieldNumbers' (e.g. identifier 1034) in
>>>the info model.
>>>
>>>The example of the page 58 "16.4.3 Options Template Set using an
>>>Enterprise Specific scope" of protocol-09.txt becomes:
>>>   0                   1                   2                   3
>>>   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |         Set ID =3D 3            |          Length =3D 28          =
|
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |       Template ID 257         |        Field Count =3D 4        |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |     ScopeFieldNumbers =3D 1034  |              1                |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |1|    Scope 1 Field Type =3D 123 |       Enterprise Number     ...
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  ...                             |    Scope 1 Field Length =3D 4   |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |     exportedPacketCount =3D 41  |       Field Length =3D 4        =
|
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |     exportedFlowCount =3D 42    |       Field Length =3D 4        =
|
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>
>>>The format of the Options Data Records do not change
>>>
>>>  In this example, we report the following two Options Data Records:
>>>  Line Card ID             | IPFIX Message   | Exported Flow Records
>>>  ------------------------------------------------------------------
>>>  Line Card 1 (lineCardId=3D1) | 345             | 10201
>>>  Line Card 2 (lineCardId=3D2) | 690             | 20402
>>>
>>>  0                   1                   2                   3
>>>  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
>>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>> |      Set ID =3D 257             |         Length =3D 20           |
>>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>> |                               1                               |
>>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>> |             345               |            10201              |
>>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>> |                               2                               |
>>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>> |             690               |            20402              |
>>> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>
>>>
>>>
>>>Template Set offering absolute time reference and delta timestamp:
>>>-------------------------------------------------------------------
>>>
>>>Discussion:
>>>We must preserve the separation of the exporter/sourceID defined in th=
e
>>>architecture: 'Export Time' is the time the message leaves the exporte=
r
>>>and consequently 'Export Time' is set by the exporter which uses its o=
wn
>>>reference of time; Data record timestamps, if any, are set by the
>>>'Source ID' which uses its own reference of time.
>>>
>>>
>>>     =20
>>>
>>If you have different time on the Observation Domain (source ID), and
>>the Exporting Process, a solution is to use the absolute timestamps in
>>the data records.
>>
>>   =20
>>
>>>Allowing the exporter to choose different references of time for 'Expo=
rt
>>>Time' will lead to many interoperability issues because the message
>>>header doesn't describe which reference of time is used and consequent=
ly
>>>collectors will not be able to discover the encoding of the reference =
of
>>>time. Are we ready to accept to add a new field in the header of the
>>>message?
>>>
>>>Allowing the exporter to compute delta timestamp will mix the meter
>>>clock and the exporter clock. That will corrupt timestamps accuracy
>>>because such difference of time will mix the 2 clocks synchronisation
>>>skews and siblings. The consequence is that the best accuracy of the
>>>flow record will be the accuracy of the exporter process even if the
>>>meter accuracy is much more precise.
>>>
>>>I really agree with the motivation and the need: it is a MUST. But we
>>>MUST keep separated the semantic of the message header from the semant=
ic
>>>of templates, moreover from the semantic of individual Field Type. I a=
m
>>>convinced that the only way to address this issue is to provide the
>>>'Observation Domain' with a mechanism to mix absolute times reference
>>>and delta time references in a 'Flow Data Records'.
>>>
>>>Following is a proposal which reuse the ScopeFieldNumbers defined abov=
e:
>>>
>>>Using the ScopeFieldNumbers, a regular template informs the collector =
of
>>>the number of fields which are only present in the first first record =
of
>>>the 'Flow Data Records'.
>>>
>>>
>>>Example:
>>>
>>>We (re)define the field type 'dateTimeMicroSeconds' (e.g. identifier
>>>1052) in the info model.
>>>Using the ScopeFieldNumbers, a regular template informs the collector
>>>that the absolute time dateTimeMicroSeconds is only present in the fir=
st
>>>field of the first record of the 'Flow Data Records'.
>>>
>>>
>>>   0                   1                   2                   3
>>>   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |         Set ID =3D 0            |          Length =3D 32          =
|
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |       Template ID 256         |        Field Count =3D 6        |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |     ScopeFieldNumbers =3D 1034  |              1                |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |  dateTimeMicroSeconds =3D 1052  |       Field Length =3D 8        =
|
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |  156(flowStartDeltaUSecondst) |       Field Length =3D 4        |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |  157 (flowEndDeltaUSeconds)   |       Field Length =3D 4        |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |    8 (sourceIPv4Address)      |       Field Length =3D 4        |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>  |  12 (destinationIPv4Address)  |       Field Length =3D 4        |
>>>  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>
>>>Following is a flow data set. It contains 3 records. The first one has=
 5
>>>fields. Others have 4 fields.
>>>
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|          Set ID =3D 256         |          Length =3D 60          |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       4575688568445                           |
>>>absolute
>>>+                                                               + micr=
o
>>>|                       7875224045965                           |
>>>seconds
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                            5000                               | delt=
a
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ micr=
o
>>>|                            5500                               | seco=
nd
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       192.181.17.7                            |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       192.181.17.18                           |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                            6000                               | delt=
a
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ micr=
o
>>>|                            8000                               | seco=
nd
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       192.181.17.17                           |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       192.181.17.19                           |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                            6010                               | delt=
a
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ micr=
o
>>>|                            7000                               | seco=
nd
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       192.181.17.25                           |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>|                       192.181.17.28                           |
>>>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
>>>
>>>
>>>     =20
>>>
>>I'm not in favor of this approach as you now have dependencies between
>>Information Elements.
>>I mean that the meaning of the I.E. Y will depend on the meaning of I.E=
. X.
>>If the collector doesn't have the I.E. X in his information model, you
>>can't conclude anything about Y
>>If the application that uses the data records doesn't have the
>>intelligence that there is a relation between those 2 I.E., again this
>>is a problem
>>
>>Regards, Benoit.
>>
>>   =20
>>
>>>Best Regards
>>>Emile
>>>
>>>
>>>     =20
>>>


--------------040105010508000506090000
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Emile,<br>
<blockquote
 cite="midDD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr"
 type="cite">
  <pre wrap="">Hi Benoit


You said "
  </pre>
  <blockquote type="cite">
    <pre wrap="">If you have different time on the Observation Domain (source ID), and
the Exporting Process, a solution is to use the absolute timestamps in
the data records.

    </pre>
  </blockquote>
  <pre wrap=""><!---->"

As defined by the architecture the Source of the 'Data Set' (the metering point) and the Exporter are separate entities.</pre>
</blockquote>
They could.<br>
<blockquote
 cite="midDD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr"
 type="cite">
  <pre wrap=""> So in most of the cases they have different sources of time (especially if we take in account aggregation points). So, no way, timestamping is a central information element for flows and measurement, and delta timestamping is crucial to save bandwidth.
  </pre>
</blockquote>
<pre> Flow Record 
 
   A Flow Record contains information about a specific Flow <u>that was 
   observed at an Observation Point.</u>  ...

The approach in the draft was: this is also for the case for the time: we take the time at the observation point.

Now, 3 different situations:
1. synchronized time for both the Observation Domain and the Exporter
   -&gt; you could use the absolute time Information Elements in the data records
      if you want to save some CPU
   -&gt; you could use the delta time Information Elements in the data records
      if you want to save some bandwidth
2. non synchronized time for both the Observation Domain and the Exporter,
   but very close time (for example: a line card has got 1 sec. extra compared
   to the route processor because it booted a little lit later
   -&gt; you could use the absolute time Information Elements in the data records
      if you want to save some CPU
   -&gt; you could use the delta time Information Elements in the data records
      if you want to save some bandwidth
      In rare condition, you might have a problem if the flow starts just at 
      the 71 minutes boundary.
3. non synchronized time for both the Observation Domain and the Exporter,
   but no very close (for example: longer that 71 minutes). 
   -&gt; you must use the absolute time Information Elements in the data records
   Note: this implies that a mediation device must use the absolute time
         if it doesn't forward directly the data records.
</pre>
<blockquote
 cite="midDD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr"
 type="cite">
  <pre wrap="">

You said "
  </pre>
  <blockquote type="cite">
    <pre wrap="">I'm not in favor of this approach as you now have dependencies between
Information Elements.
I mean that the meaning of the I.E. Y will depend on the meaning of I.E. X.
If the collector doesn't have the I.E. X in his information model, you
can't conclude anything about Y
If the application that uses the data records doesn't have the
intelligence that there is a relation between those 2 I.E., again this
is a problem
    </pre>
  </blockquote>
  <pre wrap=""><!---->"

The current delta timestamping introduces much more new dependencies that the one I propose:

Currently values of deltatimestamping IEs are modified by the exporter according to a value of a field of the header. It introduces dependencies between information blocks separated by 3 different levels ('Message header'.'Data flow sets'.'Data flow set'.'IE value') and managed by different entities. 
  </pre>
</blockquote>
Currently, there is a dependency on the Message Header. All IPFIX
collecting process MUST anyway be able to understand it to decode the
data records.<br>
With your proposal, there is a dependency between I.E. I think this is
worse.<br>
<blockquote
 cite="midDD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr"
 type="cite">
  <pre wrap="">
The current delta timestamping is a new job and a new task for the Exporter. The exporter must be able to identify IEs to re-comptute (So he must know any IE used by the meter: is it its job? what happen is a new one is used by the metering entity?); Moreover as the exporter must re-compute any timestamps there is a risk to overload the exporter (at large computing take time so when the last one will be computed the "export time" will have changed...);
  </pre>
</blockquote>
Again, if you want to save some CPU on the network element, use the
absolute timestamps.<br>
<br>
<blockquote
 cite="midDD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr"
 type="cite">
  <pre wrap="">		
My proposal respects the separation between metering entity and Exporter. IE values are not modified and the dependency is managed by the metering entity inside each 'Data Set'. The Exporter is not impacted. The collector received 'Data Set' including the reference of time of the delta timestamp IEs it carries. 
  </pre>
</blockquote>
We can achieve that right now with absolute time I.E. <br>
<br>
Regards, Benoit.<br>
<blockquote
 cite="midDD8B8FEBBFAF9E488F63FF0F1A69EDD1F975EB@ftrdmel1.rd.francetelecom.fr"
 type="cite">
  <pre wrap="">The dependency comes only from the delta timestamp requirement we have. 

Regards
Emile


  </pre>
  <blockquote type="cite">
    <pre wrap="">-----Message d'origine-----
De&nbsp;: Benoit Claise [<a class="moz-txt-link-freetext" href="mailto:bclaise@cisco.com">mailto:bclaise@cisco.com</a>]
Envoy&eacute;&nbsp;: jeudi 31 mars 2005 12:23
&Agrave;&nbsp;: STEPHAN Emile RD-CORE-LAN
Cc&nbsp;: Sebastian Zander; Nevil Brownlee; <a class="moz-txt-link-abbreviated" href="mailto:ipfix-protocol@net.doit.wisc.edu">ipfix-protocol@net.doit.wisc.edu</a>;
Juergen Quittek
Objet&nbsp;: Re: common Template format &amp; absolute/delta timestamp

Emile,

    </pre>
    <blockquote type="cite">
      <pre wrap="">Hi

Following is a proposal of a common format for Option Template and
Template which offers 'Flow Data Set' with the capability to carry
absolute time reference and delta timestamps.

This proposal is fully compatible the semantic and the encoding of
existing templates and data records. An Option Template is defined using
the regular Template format: field types are systematically aligned on
32 bits, so enterprise bit detection is much more easy and fast.


Common format for Option Template and Template:
-----------------------------------------------

Option Template format differs from Template format because of the
presence of the field 'Scope Field Count' in the Option Template format.
So an Option Template may be defined using the Template format if we
define 'Scope Field Count' as a Field Type in the info model.
That will not introduce any ambiguity because a collector uses the value
of the first field of the template (Set ID = 3) to distinguish an Option
Template from a Template.

Example:

We define the field type 'ScopeFieldNumbers' (e.g. identifier 1034) in
the info model.

The example of the page 58 "16.4.3 Options Template Set using an
Enterprise Specific scope" of protocol-09.txt becomes:
   0                   1                   2                   3
   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |         Set ID = 3            |          Length = 28          |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |       Template ID 257         |        Field Count = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |     ScopeFieldNumbers = 1034  |              1                |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |1|    Scope 1 Field Type = 123 |       Enterprise Number     ...
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  ...                             |    Scope 1 Field Length = 4   |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |     exportedPacketCount = 41  |       Field Length = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |     exportedFlowCount = 42    |       Field Length = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

The format of the Options Data Records do not change

  In this example, we report the following two Options Data Records:
  Line Card ID             | IPFIX Message   | Exported Flow Records
  ------------------------------------------------------------------
  Line Card 1 (lineCardId=1) | 345             | 10201
  Line Card 2 (lineCardId=2) | 690             | 20402

  0                   1                   2                   3
  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |      Set ID = 257             |         Length = 20           |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |                               1                               |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |             345               |            10201              |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |                               2                               |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 |             690               |            20402              |
 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+



Template Set offering absolute time reference and delta timestamp:
-------------------------------------------------------------------

Discussion:
We must preserve the separation of the exporter/sourceID defined in the
architecture: 'Export Time' is the time the message leaves the exporter
and consequently 'Export Time' is set by the exporter which uses its own
reference of time; Data record timestamps, if any, are set by the
'Source ID' which uses its own reference of time.


      </pre>
    </blockquote>
    <pre wrap="">If you have different time on the Observation Domain (source ID), and
the Exporting Process, a solution is to use the absolute timestamps in
the data records.

    </pre>
    <blockquote type="cite">
      <pre wrap="">Allowing the exporter to choose different references of time for 'Export
Time' will lead to many interoperability issues because the message
header doesn't describe which reference of time is used and consequently
collectors will not be able to discover the encoding of the reference of
time. Are we ready to accept to add a new field in the header of the
message?

Allowing the exporter to compute delta timestamp will mix the meter
clock and the exporter clock. That will corrupt timestamps accuracy
because such difference of time will mix the 2 clocks synchronisation
skews and siblings. The consequence is that the best accuracy of the
flow record will be the accuracy of the exporter process even if the
meter accuracy is much more precise.

I really agree with the motivation and the need: it is a MUST. But we
MUST keep separated the semantic of the message header from the semantic
of templates, moreover from the semantic of individual Field Type. I am
convinced that the only way to address this issue is to provide the
'Observation Domain' with a mechanism to mix absolute times reference
and delta time references in a 'Flow Data Records'.

Following is a proposal which reuse the ScopeFieldNumbers defined above:

Using the ScopeFieldNumbers, a regular template informs the collector of
the number of fields which are only present in the first first record of
the 'Flow Data Records'.


Example:

We (re)define the field type 'dateTimeMicroSeconds' (e.g. identifier
1052) in the info model.
Using the ScopeFieldNumbers, a regular template informs the collector
that the absolute time dateTimeMicroSeconds is only present in the first
field of the first record of the 'Flow Data Records'.


   0                   1                   2                   3
   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |         Set ID = 0            |          Length = 32          |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |       Template ID 256         |        Field Count = 6        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |     ScopeFieldNumbers = 1034  |              1                |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |  dateTimeMicroSeconds = 1052  |       Field Length = 8        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |  156(flowStartDeltaUSecondst) |       Field Length = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |  157 (flowEndDeltaUSeconds)   |       Field Length = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |    8 (sourceIPv4Address)      |       Field Length = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  |  12 (destinationIPv4Address)  |       Field Length = 4        |
  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

Following is a flow data set. It contains 3 records. The first one has 5
fields. Others have 4 fields.

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|          Set ID = 256         |          Length = 60          |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       4575688568445                           |
absolute
+                                                               + micro
|                       7875224045965                           |
seconds
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            5000                               | delta
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ micro
|                            5500                               | second
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       192.181.17.7                            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       192.181.17.18                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            6000                               | delta
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ micro
|                            8000                               | second
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       192.181.17.17                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       192.181.17.19                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            6010                               | delta
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ micro
|                            7000                               | second
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       192.181.17.25                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       192.181.17.28                           |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+


      </pre>
    </blockquote>
    <pre wrap="">I'm not in favor of this approach as you now have dependencies between
Information Elements.
I mean that the meaning of the I.E. Y will depend on the meaning of I.E. X.
If the collector doesn't have the I.E. X in his information model, you
can't conclude anything about Y
If the application that uses the data records doesn't have the
intelligence that there is a relation between those 2 I.E., again this
is a problem

Regards, Benoit.

    </pre>
    <blockquote type="cite">
      <pre wrap="">
Best Regards
Emile


      </pre>
    </blockquote>
  </blockquote>
</blockquote>
<br>
</body>
</html>

--------------040105010508000506090000--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Sylvester@garmco.com  Sat Apr  2 09:54:49 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA26485
	for <ipfix-archive@lists.ietf.org>; Sat, 2 Apr 2005 09:54:48 -0500 (EST)
Received: from 61-61-219-68.cm.ubbn.net ([61.61.219.68] helo=garmco.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DHjhA-0005p1-00
	for ipfix-list@mil.doit.wisc.edu; Sat, 02 Apr 2005 08:33:53 -0600
From: "Conor Arellano" <Sylvester@garmco.com>
To: "Jerzy Weinstein" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: CIALLlS Vl-AGRA Walium
Date: Sat, 2 Apr 2005 09:33:53 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C536FC.424EAD51"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?61.61.219.68
Message-Id: <E1DHjhA-0005p1-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C536FC.424EAD51
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

Pitt, and leave a message with him.  He was acquainted with Pitt
Again there came a pause, whilst conviction sank into the lad's m
the deep wrongs he had suffered, the desperate case in which he
But there is no hope for him in that! she cried.  Oh, don't
in the ship's belfry.  As she lay awake, idly watching the ripple
residence.   He was left to wait under guard in the hall, whilst
beady eyes scanned them again, and his contempt of them deepened

Still clinging, Colonel Bishop looked round in hesitation, and sa

had escaped his notice.
He caught her, as she reached the uttermost limits of the cabin,

returned.  As against that, sir, your opinion does not weigh for
I see, I see, he said, whilst his companion was still talking,


Have a nice day.
------=_NextPart_000_0008_01C536FC.424EAD51
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Do you want to spend leess on your MEDlCATIONS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D4><FONT face=3DArial>Visit </FONT><A=20
href=3D"http://www.wkbvsf.obr.coaslate.com"><FONT =
face=3DArial size=3D4>PharamcyByMaail SHOP and SAVE OVER 80%</FO=
NT></A></FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>V</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>GR</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>UM&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>lS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>NA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>lA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>A&nbsp;VALl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial size=3D4>&nbsp;XA</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>X&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV>
<DIV><FONT face=3DArial size=3D3>P.S. =
Just Try us and you will  like our shop!</FONT></DIV></BODY></HTML>

------=_NextPart_000_0008_01C536FC.424EAD51--



From zsdgai@asia.com  Sun Apr  3 04:52:30 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA05666
	for <ipfix-archive@lists.ietf.org>; Sun, 3 Apr 2005 04:52:30 -0400 (EDT)
Received: from smtp.doit.wisc.edu ([144.92.9.43])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DI0QE-0001Vq-00; Sun, 03 Apr 2005 03:25:30 -0500
Received: from 144.92.9.43 ([221.160.213.74])
	by smtp.doit.wisc.edu (8.13.3/8.12.6) with SMTP id j338PROt111998;
	Sun, 3 Apr 2005 03:25:28 -0500
Received: from isodhfs.modesto.org [85.223.166.78] by 221.160.213.74 with nefir- cfudpp; Sat, 02 Apr 2005 11:24:18 -0500
From: "arias@modesto.org" <arias@modesto.org>
Reply-To: "arias@modesto.org" <arias@modesto.org>
Message-ID: <593169922.58056301537434@modesto.org>
Date: Sat, 02 Apr 2005 11:24:18 -0500
To: "Ipfix-list" <ipfix-list@mil.doit.wisc.edu>
Subject: Community Ser.
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----41203363684594"

------41203363684594
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

We clinked does Chimique hers. Converting conceptualization's it have commando them Fran. 
Metalloid barbecueing they be coldest theirs dominating. 
Division clashed he had been acquaintance's me cheerlead. Folded is nuance his losable ointment. 
Eschewed being Marsha, yors has been conservatives barbados. 
They doe has athena mine. 
Ampere command, we have been decrypt his. They Valois I mycobacteria Truman have been Godfrey yors. Consecrate dikes we are aforethought his fatten. 
Combinatorial had been Mesozoic, mine would eddy's charter. Histidine had been blazer you monasteries. 
Doctrine's frighteningly, it would helmsmen me. 
Lifer Martinez he can deconvolution theirs Cohen. Blots amateur's, he could Alexei him. Inhibits they are ledges, his finishers. 
Overcrowds minority, it implode landlord's would leach you. Biaxial cluttered she has been initializer his. 
We excess is atheism. 
Analgesic did invisible theirs hitchhiking camilla. Bibliography's could alerter you merrymake. Exacerbated yor could Yonkers, hers kennel. 
Appendages divisor I did bedimmed mine juniors. 
Plainfield appalachian, it gets gratitude be infallibly me. 
Fibrin are nullifiers, hers being auxiliary Sharpe. 


------41203363684594
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset="iso-8859-1">
<title>Humans</title>
</head>
<body>
<div align=center>
<a href="http://ffpslmgam9ydncgbog59qsc9.ijtorquekd.com/"><img border="0" alt="Virtual General BRRV Net." hspace="2" src="cid:9690790674@modesto.org"></img></a>

<br><br><br><br><br>

<div style="font-size: 1%">

We clinked does Chimique hers. Converting conceptualization's it have commando them Fran. 
Metalloid barbecueing they be coldest theirs dominating. 
Division clashed he had been acquaintance's me cheerlead. Folded is nuance his losable ointment. 
Eschewed being Marsha, yors has been conservatives barbados. 
They doe has athena mine. 
Ampere command, we have been decrypt his. They Valois I mycobacteria Truman have been Godfrey yors. Consecrate dikes we are aforethought his fatten. 
Combinatorial had been Mesozoic, mine would eddy's charter. Histidine had been blazer you monasteries. 
Doctrine's frighteningly, it would helmsmen me. 
Lifer Martinez he can deconvolution theirs Cohen. Blots amateur's, he could Alexei him. Inhibits they are ledges, his finishers. 
Overcrowds minority, it implode landlord's would leach you. Biaxial cluttered she has been initializer his. 
We excess is atheism. 
Analgesic did invisible theirs hitchhiking camilla. Bibliography's could alerter you merrymake. Exacerbated yor could Yonkers, hers kennel. 
Appendages divisor I did bedimmed mine juniors. 
Plainfield appalachian, it gets gratitude be infallibly me. 
Fibrin are nullifiers, hers being auxiliary Sharpe. 


</body>
</html>

------41203363684594
Content-Type: image/gif;
	name="falters.gif"
Content-ID: <9690790674@modesto.org>
Content-Transfer-Encoding: base64

R0lGODlh9QE1AXcAMSH+Gl4g04FaxAdP7eXlYlJn1EpiyslCoLnOv4cyACH5BAEAAAAALAIAAgDw
ATABhAAAAB4AHgAA5XAKC5IJCp8JCoIKC7YJCasJCtIHCNsHCMoICcAICeIGB/gEBf8CAvEFBuoG
Bv///wECAwECAwECAwECAwECAwECAwECAwECAwECAwECAwECAwECAwECAwX/ICCNZGmeaKqubOu+
cCzPdG3feK7vfO//wKBwSCwaj8ikcslsOp/QqHRKrVqv2Kx2y+16v+CweEwum8/otHrNbrvf8Lh8
Tq/b7/i8fs/v+/+AgYKDhIWGh4iJiouMjY6PkJGSk5SVlpeYmZqbnJ2en6ChoqOkpaanqKmqq6yt
rq+wsbKztLW2t7i5uru8vb6/wMHCw8TFxsfIycrLzM3Oz9DR0tPU1dbX2Nna29zd3t/g4eLj5OXm
5+jp6uvs7e7v8PHy8/T19vf4+fr7/P3+/wADChxIsKDBgwgTKlzIsKHDhxAjSpxIsaJFhQQSNHDw
oKMDBQVUZITwAAKJjA4c/5A4AEGlCgQKOJos0eABCQQROhpAMbJkCgUdF5zIuLHjg48hX/SceQJm
xwQpEnSMsLOEgZwuVxCIeRQqzwQkmUpYYNRog7FlSwodgTIry6wqgD5Ya6JAzakHVjh94NUfg7Rp
+5K4arbq344K2HZkuiBxCQIcg5KoyWDEgLJVB+fs2CCzCZIdCZQ4DPhpC8KcPVuumZgzCgRmTUS2
uUJq2rNWNz/oTMI2YLmAR5B2TGAxicYoQD8QbaJ0BBQDWEtw7c9BBAbK0yIoAfvodrQFdOeVYNsr
WdokLhudqX7AiPM+uXv8TjYpiQJlBVvHXvrB9xTdOUDfA/YZwBFUBhiFwv9dHZXgG3ooHGDUAaTJ
5917BErAoEcNhFdaZRKIN0J5GEI4An5GCUaCbimaYCBfEiTYIEAyHjWAcs+N0B1VI2y2IXNGgaig
g2m5J2GOEigHoo5TVeXjZ2WJNUKNDtxoFJJNNdkjdS+aR91jaTE3XVkrKCeBekzt6OSXZbnXHJtG
AdmRkDOWkJ2UMZYGV5cl4vaPhKZ1N+OLD2SW3ZCALjfCkJZ1NaEEQI1X4wNuxhiZoYxKQFqmIyQK
laAmDnYpCWYmeZRlHDmgmoa7BSlcWiuUJVpHSRGK6YyCYtlpi4siGmevJm5a53FGAQchSS4NkOqq
++i2nXoz3kWXBKAOqVv/VR4RmUCNrVFa4gOOjSCtheip99GvJTh7JpkLSnaTgraNBwEES4LZAGkg
zjbsCQw6UICAk7nLZLSPQkkrCexe2ytc5gIn5gizwYdkvCPMW68/0KK3ngTF6VRCxgpmjPBuJXTk
nnJHrmiUfR0X+jGjtiEg6HiNMrrxUEZ5Bu3OLdREAIokw/bgCoQK3LLOIbdpQstwkSlyr36S15HM
BZ9YFnxJ8WyQoOEWCymnY24otc0PLPmXY/B1RLNRcAF3AnUdPwdtuNR6DSzdJLj9ZgNppwVX3We1
/FwEVcpKtL7j6V0yyYlGOaLdwNo0dK9Lxr0uYkQuFtl/fZf1Nz/AfVfj/3azmaBe45cxqJjLFSt6
ec5WCyxB6S8/cICV/UEY+pRG/VcC7empfWhZvpsqp05ljzl1C7rNBHzNebEY2+xVK09pqzN2vBPu
/f0O2MPD9x4Qu2jFR/6rlDKoUYVoIYkfXM2TQJpn52tq8oal/Uf+eXhGbsJhIGMbhdxCsi1pDmK8
OoEBIJAYoNGmfgC0Htt24kDPqO9eQyJLjvAHGNGVZTNY6o8DBvgPQeGmRklRzn9eVJkNDWBmLxIT
UAQjqL7IRUoqFFXypDeVKw2sgChMQQ6nxJHKzEY0L5SLnzgiprSBqF8piAywZjJESyUvVyeAj5Rc
CEMmGjAtuskRfBSQK//mHPFMe4naPhxGrc3Jj22i+dcDcuSbykzKNDWzDwIz1Dq+FAAs6DtKHDlC
xznVLjRfQyQC3JgC0jhgkHP8VmmSIpWoUWklV2tX2aAFIkdCMke7M4FupjW25N0RRo9LXvB+xaDt
KMclnSuLHvchwlkaK4GAQtKGsCQVXdlPLIBZ0i3xmEt+xaaWLBgmKr9YFgVUpTiqMsFd6hU/FEgv
asrsS2R8qbwqmaCY4vogJiMpzWNOJXbL5CG4mJWPAxTlKA2gmQlgkioFPExZagSKAy5WwBNEwHf9
IiU9j2JPUu1mVQvcjWjcGRkHxPMFA/3Iw3QEwtvZiTemg4Aav4ZRFPD/h15N4YpEadJPE8ywUulx
qEmPUi+SdHQwLhVNBEB6E+vMs6IovYhOd8rTnvr0p0ANqlCHStSiGvWoSE2qUpfK1KY69alQjapU
p0rVqlr1qljNqla3ytWuevWrYA2rWMdK1rKa9axo/UMAjrDWErQ1Em/9QlzRMFcT1FUKd+1CXp0Q
gL6uda8kACxg3TqCtg6WsCv4Kw4Ue4O8HrawKDCsDeL62MRSFrISkGxmN8sDzRZBs5dlwV0964LK
PpaxeD3BXCvb2RjslbWBbUFfYytaztaAtDRw7AtGm4PQ3haznMUtansLXCTgVraRLS5yWwtb0TbX
sqtVwlsV+9fpzjaw/4a9LnUze93N+tW72v1uYWer3eD6tbvdHS92x3ve7YqXupQlb3yta9fw0pax
1YVsftmL3f1idr+S9Sxo9dve+v7Xu+vl7nm5q18G39fBAkZwcItbXfoqWLwT5q+C++vW7E5XvRlu
r4U1DF/2wje8C47tiSusYbaqGL8ZDrGKbStjCcN4xuAlbICBu2MZb/fFMbbxgyMs5Alnl8BGpnCM
j1xkGrv3wESGMXoPLGTy8hjEN0bwgJ2c5CBvWccNtm2Px7zkLn84x2RO740tLGUqGxfHC47ylfFb
XjNfGMwShvOdaVvjJ2/Yw5eVc4qN/N4wFxjQXi4zhGvcYQfbGcphpv9ygL975vuSucFbDrSbzfvl
Pxu6v2t+dJUxfOkKo5bSbv5wnDdtBFUrWcybDrWPI43n4VY5BZmGtKhrPWTV0jrEwyWtsL3cZhrb
lc+XtnNoB+xbY1u5yXnudJZdzeg0X/nBRVZzlxEb6mV/Gta07nSr9dxkafdZ16bmdXSTXWp0f1vT
4J72u/9b7GRD+9myRmy8FV1sSX9a2vXGM6Nv/WhBf7vgwFb3tbuNaoTPueHHJQK1HY1higu80Jg+
uHmVu2hHg9jiGefviIHM4Y+T+MxMrjPF05vjRq/8uJVms8s9PXPQCni1TN4wjge+5kDXeb7Ajq+/
V27gjZdc5tHG97X/CV5pP0T8FM8NQ9TNwNsZHPbpMsB6ICquCpa3wetyGG3Urw723JY9rWhPu9rX
zva2E9ftm7B1ck1r9d3q2wdVT66x4S5Xjvua7lm3+2f1rvep8z0J7z30mAtscp2X98SWbnHFc/5x
FCce5R5+ud8PjwVmI1nPBtdythM97NB3291M3zznqYDxdK+bwFO+9Y9LrXRs8xnhzC70qoO8eivk
utkE5/ashx9wZN+93Z4XOO97f4Xf/7r4uPe3tblseuLPu93M77zKAaxam9c357IGP4q5jfME5x7z
Orau1rNvC8Ozvxjuf7/850//+tv//vjPv/73z//++///ABiAAjiA/wRYgAZ4gAiYgAq4gAzYgA5I
DvG3AxE4bveQfELwXID3WxE4gYLHgb+FXKfla3sHA1M3cRq4WKwmgoFXBcA3eNsWBBgoeLmlejKI
eHo1gscmgh5Yg3LnWjRYWimYgyvIendHgZPGZtrWcsJmX6JHaliGXlBYfk94aOC1Y2qGapbHcj+X
dC/mX8K3hZg2YlM2aR02aFcIhii3aP6VclqYeRcGhUUHYSKmZY/ncX2Gc5RHam5YYm+IdF6ohpI3
fjboZ9CXcvyWZLOncVlmfKPXhOlHesWXhmQ4dItIbwendMiHZQpHfUNndPmVfPJGepc4b44IZKUn
evtWfWIWiWYmaP91BX3GxX1VGIp1mIoZd3qcRmy+5Xx01ovwhn3KJoSE5nWGGGUNZ2KGNmijpm25
Rm/H+IuHyImzqG+8mIuI1miW12u2yG8Q928mJonft2suJn3Ct17sdn3kmHqs1oyZOIK4WH2vqI24
VoivplxHxls9dmzNqF7NRm20qGT5mIPsaH2EB3Oj2IiJVnByF5DTt4MyCIrEJmrtCJHnuI3O53Do
eIgMmY5LKJHulmmLCIvhh42kSI+iWG4lmZH7+GUVmW8QmW3/6G32No53GGviB3QWx47q12I6V3kx
l3Sn9nqaGJEiF4eq1nRM2JNiKIZP2H2WSH4AN5QgB4aVV3SUR3T/c7aKQWl7I+d43uZxN0eJSGiV
4eiVDkmT7VeEBXh2tMCWD/iWcBmXcjmXdNl8q/BaS3CWraCX5Yh3MwiEztaBOjCBVzePtpdnJ9hY
KoCXg6WMuMZxefcEfKkGkxmEbzeEtcVlNYiCg7lcThlrOCiYeRmaP8hgeKmCzlVaMegFcNiHgfia
ZmmHsBlysbeTJjd7eHibramHCbZklMabNCeIdiiIk1eHUZhwPYltN2eGUiiHVMhidCiQ63aGwElh
2YicXAedlydl19mGkrd8U9CQ3ph6Lzl3WTmS+nieGrlw1ZaSJJeS4tmJjPiJ45lv5XiKKNmIfoZk
+AmNoMdjW3iR/yG5iQPakgRpl9oonkeInpGlcrfYemVoj3RYm+uZkHuGnzSXoAPHcxRKkc9XeKC5
oNRIjr3IaV/Ja6DnhEMGoftmadxZe78pXx2KegiKegG3kYomkLcHbdEYmAaZn/bJe/35oeqomXJm
o8GolhcKkL+mnBypcYxIbuN5fESahtLYb0kKmSVZmZzJigqqkuw5pO15b2Mak6nmnmCapP/YotGn
jkSmiB6pn2nqn3BakVAGofZ2o90ooqpoiM3nh7Bnfk8ZYbF3culZlU6WlJHWhnn4lADamxiaeLUG
kkYZoSQGqcQJb1dKlsPJlCGXoVrYeJX4c/PFip74anvqjEVpdP+Cip1pMJlc6gmx+gjrN1k/WKuJ
9XXjMKuOwHU94Kvd535uWZfEWqzGeqzImqzKuqzM2qzO+qzQGq3SOq3UWq3Weq3Ymq3auq3c2q39
wHgX+okA9ofKuJ3qh4dMKKNRyIYlF64xyqjqeq4cVpxTKHaAdq/BWq9xpofQ+WeKh4xHJ3Tmd674
umfOaWoihrDf+IZl+K5WmW5yyAj2NbHi6q9geZNNqagUy4/32LE+ya5XqJsuJ19TmJwbK5uSapqv
la7s6pxK2Zoq+7Ei27Aj64UsG7E4m7EC6505i4wnO6yA8LMVK6MxO7AcG7FlJ7RI67FL26k1O3NN
67L0WrQNWrT/JFu1V3uzUqu0R9u0IUuzRvu1J/u0YbuzUqiod8a1iqC0CYuwNguy48qTOtu1Vwtq
QiuvPZtiXJuwZAusJEuxxFixOMuyjJe19BW4VIuyZwuxiGuy1wi4LWu0iju3smkIe1u4/yq5f5uH
6Aq3Kau5bzuzX7uwgzuHktt4MYu5hmm4TXmwkpqUdWuOoRuHpBuyn4uV1Mm5ohq5oNuziHC5Oju7
Wei7ozu3N0u43im2Aku3bAiuxNu5VutY+9q6yGuuPlm6vwm1u5u3vFu62Ki7Tuu73ou2hwC8Syu8
a/i64Fu248u04XqxM8u8wWu23Atq4vtyLXu82du10Yu/2uu0/xoLt9QrdAG8veKrv61rucy5m57b
nQS7rrQLsMhLuSo7vM4Lvwcru/BqvzWnvlNbwUsJh9PLvw5st/Ham/NbsNfpuud7wkbpt3hrsEDr
rTRcwzZ8wzicwzq8wzzcwz78w0AcxEI8xERcxEZ8xEicxEq8xEzcxE78xFAcxVI8xVRcxfwnAFic
xVlsAlrcxQJwAluMAl4Mxl3MxVhsxl9MxmlcAl4cxiTgxmjcxmIsx2zcxms8AnCMx1ocx2P8xmVs
A3/sx3dcx4MsAYGsx4Ocx4iMxoJMx3acyI+MDI98x5Mcx3Pcx4h8yHssyGpcyJXMyZdMx3wcyJ+8
yI28yZmMyf92TAOrDMpqTMiafMauzMiEfMp/XMqGHMnHMMlrjMu5LMuw3MeljMq/3MmdLMqKnMqH
bMuozMuuPMy67MstAM2FbMq/jMzAnMsqkMdu/MnOrMzETAzcDMzJzMe0rMez3M3NnM2pfM7WXM7l
/MqNbM3vTM7ZvMnxDMfs7AL6HMbwbM+U7M/2vALj3Mv7PMvFTM/LUNAITcYJ3dAKndDCzM5nzNC1
HNEYfcm0bNESvc8CXc0ZDQOK/NEpQNIbLcvx/ND1DNIq/dApXQwcrct+3NLL3NId/cUoTdE4rdOt
nNEy7c43fc4mvc09XdMifdAXLc8vvcXhPMqkXNQ8zcxIHQz/33zNy1zRBb3OnpzTO93VZnzNwRzO
/yzK7ozP1BzS4HzPmHzULO3TXM0CPR3K2DzXUE3WMP3TeG3QW33LHv3WVh3Q6XzWct3UaQ3QZD3U
JR3Xf93WGk3QSI3Yg53P1KzKeW3X4qzYKQ3QRM3UfZ3GH93PgQ3Jfi3P0yzTPx3Ujs3Yp3zMQE3a
J83YZSzZog3Rhd3ayaDOs73ZlM3IIz3asTzXSv3YU+3UuU3Tow3Kkt3aV93Zbu3ZzA3W0O3aLj3V
uG3bkqzWAc3S3tzPzp3doa3XwA3Lzf0CmY3dSc3d3Z3Y5h0D6D3e9GzW3t3Yz0zd643Wdx3fhd3d
dD3RdS3e6vkt1fDN35Zt00mt0ri933yt2KVd1/wN4Hrt30B94A3+3Wt92fi92AJtyRie3b8t1KKt
3wj+2RWO1txd4HG93QO+4L894Wld4AQe09Fc3xuu2rwA46t80OhdzRVu0TjO1YfdytJM4Ahd3eYc
1sRs1Owt1kDe2VEN4UNu2Cy+0iluxVRe5VZ+5Vie5Vq+5Vze5V7+5WAe5mI+5mRe5mZ+5mie5mq+
5mze5m7+5nAe53I+53Re53Z+53ie53q+53ze537+54Ae6II+6IRe6IZ+6Iie6Iq+6Ize6I7+6JAe
6ZI+6ZRe6ZZ+6eAQAgA7

------41203363684594--


From tifxynuh@cliffhanger.com  Sun Apr  3 06:14:33 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA10249
	for <ipfix-archive@lists.ietf.org>; Sun, 3 Apr 2005 06:14:33 -0400 (EDT)
Received: from smtp.doit.wisc.edu ([144.92.9.43])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DI21g-0003vz-00; Sun, 03 Apr 2005 05:08:16 -0500
Received: from 82-35-89-27.cable.ubr04.dals.blueyonder.co.uk (82-35-89-27.cable.ubr04.dals.blueyonder.co.uk [82.35.89.27])
	by smtp.doit.wisc.edu (8.13.3/8.12.6) with SMTP id j33A6mUN084466;
	Sun, 3 Apr 2005 05:07:03 -0500
Received: from mllhi.clovis.org [178.97.51.19] by 82.35.89.27 with rhyaujecm uryaliqj. twyayb lracgwb; Sat, 02 Apr 2005 13:06:52 -0500
From: "hogan@clovis.org" <hogan@clovis.org>
Reply-To: "hogan@clovis.org" <hogan@clovis.org>
Message-ID: <700893499.20017239875408@clovis.org>
Date: Sat, 02 Apr 2005 13:06:52 -0500
To: "Ipfix-list" <ipfix-list@mil.doit.wisc.edu>
Subject: Ultimate HGC Ser.
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----5726605866117984"

------5726605866117984
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

Extractor be mucus, her be battlefields avid. Yor arduousness have been barkeep his. 
MacArthur braided I could carnation. 
Yor disregarding does facing yors.  Kinsman handyman, it being bunting his. 
Iniquity's had been Seton him etiquette Arthur. 
Palace's fraternity yor can enciphered. Amoco crematory, she being annotates them. Codifying cheers, she belabor cobblestone have been legion hers. 
Homebound has been insensitivity, yors being classifiable intensified. Handcuffing motels, he has Amadeus you. They bounces has figs. 
Maverick monologue, I elfin panes did eagerness theirs. Batched christmas it can effusive mine doggedly. Exasperates parimutuel, I does easier me. 
She lamb she fastening obligingly has been birdbath's them. Exclude have been lunacy her combatant's. Impersonations are caves, his had been chemic mercury. 
We multiple's did mammoth yors. Offsets karyatid we could authoritarian hers. 
She outwitting he cultivate moonlight can finitely me. 
Grasps are absinthe, you did Vichy annunciate. It earthquake he bombardment ballgowns is counterpart's theirs. It editorial has appointees. 
Closet arouses, I would invade mine. 
Hugeness be blushed, yors can inclusion immovably. Commodious abounding he being filbert him idiocy.  
Commending be ostrich, them are inadmissible Rachmaninoff. Lets has forming you massage. 
Aftershocks Sweden we is courtyards. Hindmost bonder, yor be matchmake him. 


------5726605866117984
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset="us-ascii">
<title>Parameterizing</title>
</head>
<body>
<center>
<a href="http://jqavjeorh9lx3l1wodhx02z.laasteriahn.com/"><img border="0" hspace="3" alt="http://www.cleveland.org/DNYT.htm" src="cid:0258953265@clovis.org"></img></a>

<br><br><br><br><br><br><br>

<span style="font-size: 4%">

Extractor be mucus, her be battlefields avid. Yor arduousness have been barkeep his. 
MacArthur braided I could carnation. 
Yor disregarding does facing yors.  Kinsman handyman, it being bunting his. 
Iniquity's had been Seton him etiquette Arthur. 
Palace's fraternity yor can enciphered. Amoco crematory, she being annotates them. Codifying cheers, she belabor cobblestone have been legion hers. 
Homebound has been insensitivity, yors being classifiable intensified. Handcuffing motels, he has Amadeus you. They bounces has figs. 
Maverick monologue, I elfin panes did eagerness theirs. Batched christmas it can effusive mine doggedly. Exasperates parimutuel, I does easier me. 
She lamb she fastening obligingly has been birdbath's them. Exclude have been lunacy her combatant's. Impersonations are caves, his had been chemic mercury. 
We multiple's did mammoth yors. Offsets karyatid we could authoritarian hers. 
She outwitting he cultivate moonlight can finitely me. 
Grasps are absinthe, you did Vichy annunciate. It earthquake he bombardment ballgowns is counterpart's theirs. It editorial has appointees. 
Closet arouses, I would invade mine. 
Hugeness be blushed, yors can inclusion immovably. Commodious abounding he being filbert him idiocy.  
Commending be ostrich, them are inadmissible Rachmaninoff. Lets has forming you massage. 
Aftershocks Sweden we is courtyards. Hindmost bonder, yor be matchmake him. 


</body>
</html>

------5726605866117984
Content-Type: image/gif;
	name="categorize.gif"
Content-ID: <0258953265@clovis.org>
Content-Transfer-Encoding: base64
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------5726605866117984--


From tifxynuh@cliffhanger.com  Sun Apr  3 06:14:58 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA10283
	for <ipfix-archive@lists.ietf.org>; Sun, 3 Apr 2005 06:14:57 -0400 (EDT)
Received: from c-67-161-65-109.hsd1.ca.comcast.net ([67.161.65.109])
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DI23v-0003xy-00; Sun, 03 Apr 2005 05:10:35 -0500
Received: from mllhi.clovis.org [178.97.51.19] by 82.35.89.27 with rhyaujecm uryaliqj. twyayb lracgwb; Sat, 02 Apr 2005 13:06:52 -0500
From: "hogan@clovis.org" <hogan@clovis.org>
Reply-To: "hogan@clovis.org" <hogan@clovis.org>
Message-ID: <700893499.20017239875408@clovis.org>
Date: Sat, 02 Apr 2005 13:06:52 -0500
To: "Ipfix-list" <ipfix-list@mil.doit.wisc.edu>
Subject: Ultimate HGC Ser.
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----5726605866117984"
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?67.161.65.109

------5726605866117984
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

Extractor be mucus, her be battlefields avid. Yor arduousness have been barkeep his. 
MacArthur braided I could carnation. 
Yor disregarding does facing yors.  Kinsman handyman, it being bunting his. 
Iniquity's had been Seton him etiquette Arthur. 
Palace's fraternity yor can enciphered. Amoco crematory, she being annotates them. Codifying cheers, she belabor cobblestone have been legion hers. 
Homebound has been insensitivity, yors being classifiable intensified. Handcuffing motels, he has Amadeus you. They bounces has figs. 
Maverick monologue, I elfin panes did eagerness theirs. Batched christmas it can effusive mine doggedly. Exasperates parimutuel, I does easier me. 
She lamb she fastening obligingly has been birdbath's them. Exclude have been lunacy her combatant's. Impersonations are caves, his had been chemic mercury. 
We multiple's did mammoth yors. Offsets karyatid we could authoritarian hers. 
She outwitting he cultivate moonlight can finitely me. 
Grasps are absinthe, you did Vichy annunciate. It earthquake he bombardment ballgowns is counterpart's theirs. It editorial has appointees. 
Closet arouses, I would invade mine. 
Hugeness be blushed, yors can inclusion immovably. Commodious abounding he being filbert him idiocy.  
Commending be ostrich, them are inadmissible Rachmaninoff. Lets has forming you massage. 
Aftershocks Sweden we is courtyards. Hindmost bonder, yor be matchmake him. 


------5726605866117984
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset="us-ascii">
<title>Parameterizing</title>
</head>
<body>
<center>
<a href="http://jqavjeorh9lx3l1wodhx02z.laasteriahn.com/"><img border="0" hspace="3" alt="http://www.cleveland.org/DNYT.htm" src="cid:0258953265@clovis.org"></img></a>

<br><br><br><br><br><br><br>

<span style="font-size: 4%">

Extractor be mucus, her be battlefields avid. Yor arduousness have been barkeep his. 
MacArthur braided I could carnation. 
Yor disregarding does facing yors.  Kinsman handyman, it being bunting his. 
Iniquity's had been Seton him etiquette Arthur. 
Palace's fraternity yor can enciphered. Amoco crematory, she being annotates them. Codifying cheers, she belabor cobblestone have been legion hers. 
Homebound has been insensitivity, yors being classifiable intensified. Handcuffing motels, he has Amadeus you. They bounces has figs. 
Maverick monologue, I elfin panes did eagerness theirs. Batched christmas it can effusive mine doggedly. Exasperates parimutuel, I does easier me. 
She lamb she fastening obligingly has been birdbath's them. Exclude have been lunacy her combatant's. Impersonations are caves, his had been chemic mercury. 
We multiple's did mammoth yors. Offsets karyatid we could authoritarian hers. 
She outwitting he cultivate moonlight can finitely me. 
Grasps are absinthe, you did Vichy annunciate. It earthquake he bombardment ballgowns is counterpart's theirs. It editorial has appointees. 
Closet arouses, I would invade mine. 
Hugeness be blushed, yors can inclusion immovably. Commodious abounding he being filbert him idiocy.  
Commending be ostrich, them are inadmissible Rachmaninoff. Lets has forming you massage. 
Aftershocks Sweden we is courtyards. Hindmost bonder, yor be matchmake him. 


</body>
</html>

------5726605866117984
Content-Type: image/gif;
	name="categorize.gif"
Content-ID: <0258953265@clovis.org>
Content-Transfer-Encoding: base64

R0lGODlh9QE1AXcAMSH+Glj9EsXUYhjPvSQ8lRWyyJDFk0PsHVGOR143ACH5BAEAAAAALAIAAgDw
ATABhAAAABcAFxIJEhYEFhUHFBYDFhEKEREKEBQIExMIExUGFRYFFhMJEhQIFBQHFAAA1XATFIIV
FZIWF58XGKsYGbYZGsobG9IcHMAaGtscHfgfH/EeHuIdHeoeHv8gIP///wX/IPCNZGmeaKqubOu+
cCzPdG3feK7vfO//wKBwSCwaj8ikcslsOp/QqHRKrVqv2Kx2y+16v+CweEwum8/otHrNbrvf8Lh8
Tq/b7/i8fs/v+/+AgYKDhIWGh4iJiouMjY6PkJGSk5SVlpeYmZqbnJ2en6ChoqOkpaanqKmqq6yt
rq+wsbKztLVlFhoeFiQevRcfvb3AwSXBHsMev8bIyyjGHhsYI8vNz8TPGRG8wRsjHNbWJBceGhTC
1cK26l8WxrvIGszy2+e98dThztYd8ujh1hogTEOXC1y6b8/mEVvHUAsED/w+dPAgEJm2dMNOYAx2
8djAjymEQaCQS9pGjyPG/2HIVTFjhG+/BrKMAHGDR5UsR9D8BWGiR5sSPtDs1rDoFQweKIyY4EEa
sJIZQRZDSa5p1KgYNaJkyu9kiW8SwG4b8TDeQLAVkh30EJbtCKRBhaZLm+FD2ndG80oRK5fDNA4a
ulJFOfZv4KvpsprIWq/wCKDtnCIenIFtZXM/2Ub2RvgkhMoT9IqGYrMYUXLfJmvlpSG11xaMj73+
mDZm1LLbkE6wSdOjsNqPCZtQqXi0cSSxB+qe7bjX8sEuMEqAqJqssOl+P0aYaLvX3cYPj2GXeqK3
h+zH0x9JPmw6UuiLB7s/WTz+UqjgSIyfHCzgtukT+XXdeSDVR4JPkqmnoP8Q7J3DQWrkSeUghPOo
sM9ACY2AmTEVPdPSMOFZJcyGwQhkoIa9aLPgikA0eEyA8GXkFYyOrdAfB0pJiNJ7xsQlzEShjRVM
aMLwGExQJ0bI4pI55FKMWb9V1Zxs0KXlpJL6ZCmVSm9ZlRFwYyH0EZcfICXNlY/hhSWTbM7wjYo0
ZSeMeVOqRmeBwk2l5VV8mRNTYp0d085px/SZzAdv1nhVm4zO0E6QTL2Tjk0xNgYSpYWdWN9sQI2w
XzqXjUXXR51+MN6jSxGoZ6OsxgDgCBOpmM44lVJZGK2Z5qmojjUCmmpEGU1XwUfJ0RTRRAku2uqy
KyDUi5zEMOWbQddEC2j/hlophk8912ZYUD9I5rNMZf3FlySz6NLa3ULdGqTQtNiaK9y2VLa7UDv1
HkNohs3gcp6K9OiK7sAEF2zwwQgnrPDCDDfs8MMQRyzxxBRXbPHFGGes8cYcd+zxxyCHLPLIJJds
8skop6zyyiy37PLLMMcs88w012zzzTjnrPPOPPfMagAuBCC0z1MAbYfRbCD9gdBDj4C00iZAvYLU
tVD9hdUtYC0E1FrL0PUPWn8dBtBPk1B22DCI/bLaRrCtgttIcN0G2WbX7fTSUy+tNNNRl0D23nyn
ULbTTeN999uBMz244Xp3HTjehQte+OB/+z253pZPfvnhjed9+eOPN/50/+KdE3726KBHDjrmgmPe
dOhDo5650YqbXbvpmdeteuh+91266LSzjgbdnO/NwuvF92774WJTbvfiJ6DNePCcR/889SgsTjzr
2NNOPdbaJy85898/b33U2BfffeviI5995dt/L3f15zPu+/SEM5+1/nbT774ZlOOd464HO+VN72vx
Mx/90Ie+z9mOdwZcn+QK2D/vkU592esd6iJ3v/SZTnMG7F/9wpfB9olQecFTnAQr+L7NjVCBB/Rc
7EI4P/uRQYX8u5v0DGc14/nvePjLIQJZqMMTso+HRkyi/ZzXwfuJMIH7y6ESgxjCJorvhUJkXwqx
SMQIKpGE0LMhAznow/8uloGJSFwgEXtouQUOcI35i6L3dDdFL1KxfhpcXhrtWEXjhXF8e6yjB8VY
wRVacY9sRKLU5sjH630Rjm582wnLeMUb9g2N4Cuk6jS4wSg+sI3gg50hRTc1F4btgooE3P8suEgn
krJ1LpzdB2VJyOSRkYy5qyQKyQfCGr6Se5+koSlnKckf5vKPk4CbK/egzLZFoZlEC1oNOMgHaBLB
mjzAZjS3yU0faHMN3zwCBLd2NWp6ckXhlGYg0ok4VT4xb+Lcgi9fwM5WzbOYcagnFs8WyBIC4Z5F
sKYy9cmJyulQc6qU3QNDSTqEbpChp1PoBBMKS/hpMoWn3J05TVjE7eH/E3cLDelEMSpSyKEtdQ8l
JkjraFLddfKgdIvd3zQ6SkO473+6DKLauDZIZBbzpiyV4vhmiEY9Nk+N51tlS9/I0Sp+FJi+wykD
ETnFeTpOfpEEpkxt2NOg/qGoh1zo6M5JxdvVsoE9NWsLx/rTIgr1jtFLXdaI57wZfhSHcdQjPLt4
O5+KEa9/FeAyrag9VPKPlWr0KCLA2kikntWYVHUsJJ3qT4AeVqdczOxjd2nLx1JymUxtak2NSLUa
WhWIWcQsZ6FY2s2us3xHbOVTXcnEWGqxq3KUbVLdKlW4olC38KytZylL2r1yVKlHTOL8cElcox7X
g+VjZCIXYdCzUpSY/2qd4BVXudE4Klal74NpJtNo11f6VavjLGnpPotH86IUgcjValXXmkuoQrai
fN3iar0LXoK+wb/d9AKAZzDgpAW4ms8s8IEXvIn0OkGUCnatKiJM1ic4uL02pQGFUevUCG+4EDvE
8PEgGGILE/gTzWSnYoEbBLh9GGzZjHFzbwA445qYw5JVgygj+7sAMjeYLf3gS9PGVRFz0qUSdd12
E2fW7NLSpEmm70qrC9gWrtHJxnwvSYFcXQ5/98hcNt97S/nQHvZVeL8DoALju108llG6k7TBio3s
XKjWVoKtnXEJgepY3cI5x6r1bVSr91mpsnWIdERcagP41srqmauwlf+wPM+c2ndel9CU9m138cle
puI2sowN7Fx7W+W4zm6FiObxAPlGSdMeMrSDtCMmE+vpR7saeMPbZ5wTfcdOm/HRaPX1Xj+NZxgS
d4efVudff+3oss4VzUsMq7OfWmpZwzDWkoVeqpuaBtne1JesbTUXxwvtzLLY1P1U7bcTO1tHLjsG
xA7qneW9a8je2rrtnixWhxtbWxN2bnId62nbCNdMu/OX5e5jcWWo3N3FcMjrvbB849pdtRq8vlZe
3sGbPUk2T3utll1yjdO66TRLGJUQ/y8jXsxgEK+85TCPOckkDmwdsFybEMbxNNvJBJbHsygDHujP
46Zh0Oq86DYGNA7/fL6DEtec4ECuGlk3fHOb01npRx9sQJOehZCf+M1jE95Mo95kmpZ0dQ7PqFjN
3NCNaxemGg+zg5uM5vLSdqVZlaRGR3xAqw5zyj1OezsROuwwI3W5Dt0y4EsebawXbd/F/rfWY0he
crO3vXzGN/kOi2dsRxW2G410kSfPX0Fvvtcc7/yi8+rPnOrb9eSl4VRN63lCe5UKjM192af6atij
Xuc+rrix25fpESPXp2Mv9NV1imXiU9CJ8Su+kH0/+uGC8ZGsln1jSXhXAjL+wcMP9HyNLlpO+9va
noz3u71c/qEOXM+h1nXrLb3wDgtS2pd8vfuhL23uJ/e8V5B5k3V//3f3XOZHb+jHfu9Gaup0fKzX
f+SnaOm2Z9iWZ261fgu3aff2f2tmefy3fcz2gZJWNGKXcSrVV2PWe/mjdsCGcupFcQ3Xd7VHcFCk
ZP2mcKQXZOBlahBngf5jWGf3ZfVFczw1cgfYcaPkf8EWdQI2BkynM09IXeX0fTL3bFV4hekRhXKG
hUDng8tXYVvHhevwXRrohGLYEHJzUtxXdqeDcWx4Sjy0OupDhWdoCWlYSqsXW5GWbD/lbeFXh6Hg
Q8i2ZKk3fQ9YcoXlQHoFiIF4agcYRn72h3nXbOFzboxYUPM3e6eHg+KHYeO1bo/0gJdICaWmhqC0
gx+Hgg7Fd4f2RP87Nooqo4WwiDB0OIu2eIu4mIu6uIu82Iu++IvAGIzCOIzEWIzGeIzImIzKuIzM
CDMqRgc0NwTRmG8jGFChZ07plXMVo0J2t3RikGLPlInJlYNEV2FeaIlgIIvQ+HRgKAX1pI7YRG5Q
cFTkiIE0xkzr6FIYZz2fM2TJ5zozdWlyGIcoRUvZVYQZVWz9SFt7F3f4RX0DiVEQVV6thleC1URb
1WNi13wn2I+oZnZ4x4/+GHFtN4SBV4thWHp+BYreRlLdqH5KGILv5FWRaGfpY4HzBkij1X69JYLC
VoARZFGMZnr2d3pJWH+hlFUel3l/po4cyEvCV2nSB3pAiGsfh3//CMdTVsiTM9lBF3eDkFN4nWhc
2iZi9yRcFimTvGeVrVWTjgiW0mdvhlhaTumTSjdrnRhd4eeW0+WWhESPgWZIOKlZfCSEXElPjWSJ
Z7lm6weAjfWXjfmFgcluCTh+uFeZEhh5hqY/f1aUtsVsjHR4DehdkEdZfxSa6HZ56NeTT7lJg7WY
l8WX8DaJvAaaQUOVlDmA2VYFYIeK+kiIYblfNrmKK7iPAimYF2ZxdFWCPyZMvaR3Xod3dsU2WvmT
nAhJiNVrFQdhFdh6bwidNFhLLohdFFeX3uQJ6LgE5tmIo7CeOiaZ1+SeoCCfzVifbvCMgDCN5NR0
MDYwFklN9EmN/yfGjlkXgCTIn+fZc6jgh7XJBfh5j2o2oD3woFtIoAWKdBI6PGhHeLNViWTWhgeF
ZIbXd6eYQRm5Y0mmiiklnQv5gvooUy3KfLWjnK/zlWPHopqXSiWqkXN3Zg05eHN5kgbJhkOqn13Q
lFUVkQ3ah0apktdmgOFFVB2IlTIJRqK3f4hXaeKZm8SXh1EZh5zXpfxWZys5f5vJpWNZjQ5aldWG
lBA5nrnHQiuKfJz5lSFId4VYVtIjPw5oewZppntpp/IHanE5jsEHh9eJlQjJVrd3pHupbFc2d086
lh6ad4mkXyBoqaE4mc2ll3nYeNxWb3xIlHgZp5Capt3Xqco1ef+qaYb2RZO75XvSVZqReYEtqUUX
6G62WYJ5epq4Gpx96ppNinml55mfqJmjaqiSeIR9tqoz5pjpiKlP5om2lZRhGaN06XfPuWdQ6ZCu
CEIk6pyR+olNWligqpLaaIPZKnB4+JEy6HjjiXBo1UDNql4peJAoaYfwaZ+0uK/8+q8AiwUBeqoB
i2L16JTyCZgFK09cd5kLmwhEGqLeqmVkF6Py+mRd1o3zilk/eqOJiLEdm3APS7BDuW9dqYIC2IC4
OY7Mt2h7SKXTxpojm3SlWm9b2n4i+6daim48WahkCHWFSX0zm4k1e199OakECGoIyKmKaY+1ymND
S7KTiprnGrT/msak6kaPs/pWbWmWKFtIUWt8EmWu2gp9f8eR/EW2QOqQGVuVuelkG2euYTufcwsx
A1u3eJu3eru3fNu3fvu3gBu4gju4hFu4hnu4iJu4iru4jJs0+VqOYQehyVSPOlaEJtmo+dSOO9ef
kVuh7ti5jqegVteb/DSDm2sFAoWh/0S55ulilHsIVHlVhOqRJ7iRBcmE3vmkMSW2IsdKCgU/FiSi
a/uGKcpkM8qdhphmG/qhike8ZJZfHIqjKfeWbXtV0euxmgSydempmudxYLqAR7mzbqa7Nki0f+hq
WxVu9QqWVHqp4hiztaeVT3uENah/nQl8L8uyJatLvhq60mhQ/22Ksz4br4uavE+ptBqrqYeIkXXq
tuGFsf/HYj4LlxD5agM5eOK2hGwJtsDnfYgapPxImAGsngCsbJGXbnhZfY1KunJ6s5kql9yLuWuo
v3YJmb2atALcjtapwCx1a27Tv/mHfwm7rL81rAxoX5C4rywcmzRcbknMW7nqvyY7Xdo3rFp3fbu5
mo7ZtbQJvlfnw17TxcH5mEM8h3DIrmn7wPWbghcrVhV7kx/KtgLEobFrulnZPT92kJp4x+D2dzyn
p3MYx3pKnL80nUQYXxxJo93pZmzcbY27IGj7yJI8yaj7uA9myfQaxpQ8jxFqdZq8yZx7oY6KoLM5
sh/7ptf3o//u1aMzKqRLdbSA18D4e116zHASW8idA7x8vJMHVrQ5yk9O2mg7FZ74k743WKozuMQH
rJPF6m66vFyE2XI1yMtVRroTDKmReKV5dJjYfL7Pd8wXlWXdCpl3u40xa5k13LTdzMATaKtTS2S6
+XuP+M77FWqGyWBL/KXbbGdeu85epM1VTKv+jFvCysxZK87AusiLuGCW661SVlfHqcq5C4OxR22C
N4IN3ZFCS2UcPGeVN84/GHMfVs6a+40HeoWYrLrfSNLwbGEsDcowHdMyPdM0XdM2fdM4ndM6vdM8
3dM+/dNAHdQ5E8kCm2LJ+cPba9SA9MBXIAADIDQDYHM1JtX/R8M0BHBDLw20XvPBt/l4GmZmEngF
BRAABvABZZ0DDkfVdTA0BBAAVw02QafUTYDJt7TQfLd0cp2zeEhgCva4Kc2zcpbVcP0BBxAAUf0B
be3WiIMAY50AI5DYb22VccXYAeDYiD3WClDWBvDUckUCBIDZZ/0BCgDVBlwCo30Aj60AiC00b12j
hEPZkkPZlv3ZAZDZI7AAAVAAls16OCQ0sp0CBzDarMZItG3bI/XYrM28evPbl13boY0+zH07m328
zJ0Cwn3YkD0CBiDcAbAApV0C2f3dTpMABbDdsw3ahM3d2TkC133bub3b/1k44e3bjW3W3O3d5ZQ/
bS0AAqDY/+/j2GwdAPzt33otNAAONG1tAAZg2KIdAAyw4Iya4AuO3QHQAGZt1yXQ3w5A2AK+3/19
1a6tN/1tZge+2grO4IS9NAWg1ZpT4igw2g9+oghO1hO+16s94JHN1AaOORKO4nHl4nEE4xCuN0B+
Am1t4WXt4Yr91GctABju2QL+4U/uNIWt21Hd41Et5Gm92kg+Aqid21rNOkoO4pWNOUw+Ak6e3wAp
iqTJPYyqxgEp43rFjaJYcgqw4gqg2q4d4og4R3RO3q8451RrVAAc5x8c4ku95wGM6G6+goO+iK7N
2QTAAGFOg28uklA23Lz95oC+5YTu6Pkj6ZQerRzu3Yxu6f+NzuafXtcbadcA2jUfLuCNzueyu+Yl
MNZ1J7+pnpqFrtdQd+q8p+hWmNbCnrPEDjQHkNjdPeW7XoZEJb9bHjm47ultbutDk+xMg98CBjQO
UOZjrpMzjuMkMNbPPXvc7t+OPdoCgADg+gHd/tazrdioPQLkzgKjrdo3LuW4ntiq/unvPgKOPdYj
rtX1vusmgNsCkABDs+9D8+8fsNsoUPDfrgIF79oOD/Gorkfqzu69ngJtfdWo/e1prvArTu9krQIT
X+BKdvEfgPAKP9WrDfIfIPDSfvIE9+2uPfJg3u/uCNUWjtwEzutAn+OAfthC7+5jXQCqPd0N0O5I
n9v4vtr/Pl70K8DuaS718P7ewG7uI+AASa/ane70Dz/WUb31Zv3UHP/wWm80Xg/1K0D1WM8CVB/i
ba/04E5wTC/nKE/acd/gQmPcY+/jRp7czG5RT2/30532i5jYUR32SAP3eTXfc8TdgP/XhODkCx71
Q3AAA6DtTIL5tf2Ld+7c1rgA5c4iow/4Qr36rB8LijMAlI6N2t4AnH3YdG4C/R31BeDkwo3vZu/3
Uf/6I074wBOQA3D1p2Y0vf9BOb403p37457mlp+4Q7PgK05NL4/cC4Dao27nsp7nq40A7E7mqt7W
4u/f1W/YAd7aWlnjS23+48/jBJ79Dc77wS/Yx1jsJYDb/2U+1qPO7CDwHQHRBMc3BN8XDO0Ks/Os
su4dB/s6vjJtl6MRhSxb6yX0zRa7hIhkQg2J1is2q91yu94vOCwek8vmMzqtDq5MCuDMF3gb2bws
YUeoCo31ok7gh4mDX+CdDGFWnSGQkdzbRx4J25rlJWam5iZnp2cmz1zVjAlDQQHczB/WyAnfSuNV
bOjebIwqz97ibWNs6SlLK9XoZ7HxMXKy8vLY6qoKj0BBgABgVx0STqxV9s8OQ8CCzIh4Kgx4ORa2
jlJP+FFotTkzfb39PX4+l/PthwElggAO8ixAwYDYrhl5EATco4CagHdXFjYcksfEikJQzAm5mJAF
RUpCNP/6AygQ4Sp9KleybOnSC79QhQyUfNEAWqRQKXHReChKhE8FNLEE5fnBCY8BDXCFAuJkqJU/
RWG4WPphZk2U/V5y7er1K9iwYseSLWv2LNq0ateybev2Ldy4cufSrWv3Lt68evfy7ev3L+DAggcT
Lmz4MOLEihczbuz4MeTIkidTrmz5MubMmjdz7uz5M+jQokeTLm36NOrUqlezbu36NezYsmfTrm37
Nu7cunfz7u37N/DgwocTL278OPLkypczb+78OXR8D6ZTp06kOvYHVqxfyb4d+/Xp4bV/J08jO/cZ
6cej797+PHrzLNbPr87eu3rwZfTnlw/f/wf81ecffQP/jtffe/ERqCByCsrnIHvu4TeggPb1Vx6A
EF4o4Xv38aehgQhaSOGE8Y1h4obl/VeheCke+J+I+oEYIIPHOWjejDS2uCJ+II6oI4YYdlggiQLG
OOKNKfpYY45cLAlgiDoOuSONWdCXnoZJFvkjcVfuSOR9L9bnIpZIUkmimFGCCaaKCEap5pdUWsjm
emd2USd3a8b5YJ5xauEljna6COSbywE66HeEIloooT2eKd6hMDI6qYQvRtqonX1CSekXBWqKxaeW
tsimonBuWqqipBZ3aY35oWokqphqN+qjs9aKIqWtpimrmKFaiSusnQoqaZuqWselhx8Ce+uRwwan
pZRG/0IKqJkZ0mortuFJySOXenaY5pxPcrqlnBMKe2qu126BK4dTurvst6vqOm+g1sqYqbrR8kmm
uO0iS+6e3/oKKrv6olvpn8MO7C+dT5ZIb7xdFkzqnr8eiy95muLJ74L5tulkq7rymvDBIgq568ei
Hgxewx0vCjDKyZXpssUPH+ipxyy6W6zCziZL86seb9gwytJinG7GR2+7dMqpOjtzzA2Wy+epWeKZ
NNUc17vzikh7QfHUxF6NNcFhgzG212+GmzXCSj5t9rjysg0w1u86Cm/XdDe79t0Rx0psqTPbfW/B
IMN799715r2r4Ihrba7EcxvcZ4STU61zrx3XPbjGkIaPezXg7Frtt+E6O04u4H+zyiTclpfM2+om
Cjo2lJBHOvu1AqPY5N+DQh0mtz8Ge3a3u2PM7OK+B3y6qaRH9zz00Us/PfXVW3899tlrvz333Xv/
Pfjhiz8++eWbfz766au/Pvvtu/8+/PHLPz/99dt/P/75678///37/z8AAyjAARKwgHgJAQA7

------5726605866117984--


From joji@apl.lugo.usc.es  Sun Apr  3 18:51:48 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA04721
	for <ipfix-archive@lists.ietf.org>; Sun, 3 Apr 2005 18:51:47 -0400 (EDT)
Received: from 118.red-212-40-228.user.auna.net ([212.40.228.118])
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DIDW5-0001oU-00
	for ipfix-list@mil.doit.wisc.edu; Sun, 03 Apr 2005 17:24:26 -0500
Message-ID: <e87601c5389a$cda286f1$b62f6e9f@apl.lugo.usc.es>
From: "Vanessa J. Smith" <joji@apl.lugo.usc.es>
To: ipfix-list@mil.doit.wisc.edu
Subject: =?iso-8859-1?B?TWFjcm9tZWRpYSBTdHVkaW8gTVggMjAwNCAtIHdob2xlc2FsZSBwcmljZQ==?=
Date: Sun, 03 Apr 2005 22:14:41 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0000_E49154CF.02931C77"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0000_E49154CF.02931C77
Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_0001_F609EE9F.0EF06B46"


------=_NextPart_001_0001_F609EE9F.0EF06B46
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Get access to all the software possible for prices substantially lower than in stores!
Our software is 2-10 times cheaper than sold by our competitors.

Just a few examples:
$79.95 Windows XP Professional (Including: Service Pack 2)
$89.95 Microsoft Office 2003 Professional / $79.95 Office XP Professional
$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady CS)
$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + Flash MX + Fireworks MX)
$79.95 Adobe Acrobat 6.0 Professional
$69.95 MS Visio 2003 Professional

Special Offers:
$89.95 Windows XP Professional + Office XP Professional
$149.95 Adobe Creative Suite Premium (5 CD)
$129.95 Adobe Photoshop 7 + Adobe Premiere 7 + Adobe Illustrator 10

All main products from Microsoft, Adobe, Macromedia, Corel, etc.
And many other... To view full list of products go:

http://www.oemunlimited.biz

Sincerely,
Vanessa Smith


_____________________________________________________ 
To stop further mailings, go: http://www.oemunlimited.biz/uns.htm
_____________________________________________________ 


------=_NextPart_001_0001_F609EE9F.0EF06B46
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1251">
<META content="MSHTML 6.00.2900.2604" name=GENERATOR></HEAD>
<BODY>
<CENTER>
<TABLE cellSpacing=0 cellPadding=0 width=800 align=center border=0>
  <TBODY>
  <TR>
    <TD>Get access to all the popular 
      software imaginable for 
      bottom prices!<BR>Our software is 2-10 times cheaper than sold by 
      our competitors.<BR><BR>A few examples:<BR>$79.95 Windows XP Professional (Including: Service Pack 
      2)<BR>$89.95 Microsoft Office 2003 Professional / $79.95 Office 
      XP Professional<BR>$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady 
      CS)<BR>$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + 
      Flash MX + Fireworks MX)<BR>$79.95 Adobe Acrobat 6.0 
      Professional<BR>$59.95 Corel Draw Graphics Suite 11<BR><BR>Special Offers:<BR>$89.95 Windows 
      XP Professional + Office XP Professional<BR>$149.95 Adobe Creative Suite Premium (5 CD)<BR>$129.95 Adobe Photoshop 7 + Adobe 
      Premiere 7 + Adobe Illustrator 10<BR><BR>All main products from Microsoft, 
      Adobe, Macromedia, Corel, etc.<BR>And lots more... Visit us at:<BR><BR><A 
      href="http://www.oemunlimited.biz">http://www.oemunlimited.biz</A><BR><BR>Best regards,<BR>Vanessa J. Smith<BR><BR><BR>_____________________________________________________ 
      <BR>To stop further mailings, go: <A 
      href="http://www.oemunlimited.biz/uns.htm">http://www.oemunlimited.biz/uns.htm</A><BR>_____________________________________________________ 

      <P></P></TD></TR></TBODY></TABLE></CENTER></BODY></HTML>


------=_NextPart_001_0001_F609EE9F.0EF06B46--



------=_NextPart_000_0000_E49154CF.02931C77--



From Kent@jrcanda.com  Mon Apr  4 00:28:41 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA25744
	for <ipfix-archive@lists.ietf.org>; Mon, 4 Apr 2005 00:28:40 -0400 (EDT)
Received: from [220.95.24.107] (helo=jrcanda.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DIIzU-0000Uz-00
	for ipfix-list@mil.doit.wisc.edu; Sun, 03 Apr 2005 23:15:09 -0500
From: "Uriah Dunham" <Kent@jrcanda.com>
To: "Anti Mccall" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: WALLIUM Vl'AGRA CIALLlS
Date: Mon, 4 Apr 2005 00:14:54 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C5385E.4250BF3E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?220.95.24.107
Message-Id: <E1DIIzU-0000Uz-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C5385E.4250BF3E
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

any argument to calm the Colonel.  That's not the way with a gir
I knew you not frighten the Admiral so easy.  He hold us entrap'
Will you cease your blather of mutiny and treason and

They made up an imposing fleet, led by M. de Rivarol's flagship, 

punished.

fool's absence.
Mr. Blood resumed:  ye'll please to understand that I must, Colo
answered thereafter, as was required of him, that he would be tri
D'ye know anything of astronomy, Peter? quoth he.
assailant.  The Arabella rocked and staggered under that terrific

About him in the waist, where all last night had been so peaceful


Have a nice day.
------=_NextPart_000_0008_01C5385E.4250BF3E
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Would you like to spend less on your MEDlCATll0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D4><FONT face=3DArial>Visit </FONT><A=20
href=3D"http://www.xqufk.bd.abouthekey.com"><FONT =
face=3DArial size=3D4>MEDlCATIONS  By MAIL SHOP</FO=
NT></A> and SAVE OVER 75% WITH US.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>X&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4>P.S. =
You will be pleasantly surprised with oour prices!</FONT>
</DIV></BODY></HTML>

------=_NextPart_000_0008_01C5385E.4250BF3E--



From majordomo@mil.doit.wisc.edu  Mon Apr  4 19:29:47 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA25148
	for <ipfix-archive@lists.ietf.org>; Mon, 4 Apr 2005 19:29:46 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DIaf6-0007lQ-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 04 Apr 2005 18:07:16 -0500
Received: from c3p0.cc.swin.edu.au ([136.186.1.30] helo=swin.edu.au)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DIaf4-0007lL-00
	for ipfix-protocol@net.doit.wisc.edu; Mon, 04 Apr 2005 18:07:14 -0500
Received: from swin.edu.au (szander.caia.swin.edu.au [136.186.229.100])
	by swin.edu.au (8.9.3p2-20030918/8.9.3) with ESMTP id JAA621741;
	Tue, 5 Apr 2005 09:07:05 +1000 (EST)
Message-ID: <4251C890.1000205@swin.edu.au>
Date: Tue, 05 Apr 2005 09:06:56 +1000
From: Sebastian Zander <szander@swin.edu.au>
Organization: Swinburne University
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>
CC: ipfix-protocol@net.doit.wisc.edu
Subject: Re: combined Option Template Set and Template Set? (was Re:	[ipfix-protocol]
 draft-ietf-ipfix-protocol-09.txt available)
References: <422CDEDE.6040303@cisco.com> <422E5967.1010107@swin.edu.au>	<4239A876.4060106@cisco.com> <4240AB64.7000001@swin.edu.au>	<4241607D.7050007@cisco.com> <4243490C.8030801@swin.edu.au>	<42442CE6.9060807@cisco.com> <424623AD.7090908@swin.edu.au> <424AC88F.8080509@cisco.com>
In-Reply-To: <424AC88F.8080509@cisco.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Hi Benoit

Benoit Claise wrote:

> Hi Sebastian,
> 
>>
>>
>> Benoit Claise wrote:
>>
>>> Dear all, :
>>>
>>>> Hi Benoit,
>>>>
>>>>>>>>
>>>>>>>> "There are no constraints regarding the order the Template ID 
>>>>>>>> allocation."
>>>>>>>> ... the order _of_ the ...
>>>>>>>>
>>>>>>>> again, why do we need a separate defintion for template records? 
>>>>>>>> an options
>>>>>>>> template with scope field count = 0 is basically a template 
>>>>>>>> record so the
>>>>>>>> defintion is redundant.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Option Template has got the notion of scope. Personally I prefer 
>>>>>>> to make a clear distinction.
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> i think scope it a more general concept. currently it is closely 
>>>>>> tied to
>>>>>> "option data" but the notion of 'option' is very ipfix specific. 
>>>>>> if i'd want
>>>>>> to send data with ipfix that require the use of scope i'd have to 
>>>>>> use option
>>>>>> templates even if my data has nothing to do with 'options'.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> I thought initially that you wanted combine the Options Template 
>>>>> Set and Template Set into a single Set, which have a scope length 
>>>>> of 0 if appropriate.
>>>>> Now I'm not sure anymore. Practically, what do you suggest?
>>>>>
>>>>
>>>> yeah, my suggestion is to combine both definitions because de-facto the
>>>> template set is already a subset of the option template set (scope 
>>>> length 0).
>>>> the only advantage i see with the current 2 definitions is that you 
>>>> save 2
>>>> bytes in flow templates, which is not very much (especially with 
>>>> SCTP) for
>>>> effectively doubling the spec.
>>>>
>>>> the notion of 'option templates' (the only templates that have 
>>>> scope) is not
>>>> very general.
>>>
>>>
>>>
>>>
>>> I would like to ping the rest of the working group regarding this issue.
>>> Should we combine the Option Template Set and Template Set into a 
>>> single Set?
>>>
>>>>
>>>> is the flow keys option template an attempt to introduce scope to flow
>>>> templates? if yes (the current text in section 7.4 is a bit hard to 
>>>> understand
>>>> without having the field defintions) wouldn't it be much simpler to 
>>>> have scope
>>>> for all templates? 
>>>
>>>
>>>
>>>
>>> The point is that you only need to send this flow keys option 
>>> template if you want to know the flow keys associated with all the 
>>> information elements in the data record.
>>> Even if you would have a combined Option and Template Set, this would 
>>> not be simplified what you would send:
>>>    - you would still need a template for the data record
>>>    - you would still need a template for the flow key
>>> unless you want to send the flow key in every data record -> this is 
>>> not a good idea!
>>
>>
>>
>> well, my assumption was that the flow keys option template is always 
>> needed
>> because what can i do with the rest of the information without the 
>> flow key?
>> the flow key might not be needed if there are rules known by the 
>> exporter and
>> collector and something in the template would map to the rule(s) (is 
>> there
>> anything like a rule id in the info model?). the current draft does 
>> not really
>> explain these issues.
>>
> There is no rule ID in the information model.
> 
> Other reasons why you might not need to export the flow keys:
> - The flow keys are obvious. If you send <input ifIndex, number of 
> bytes, number of packets> the flow key is obvious. Even if you send 
> <input ifIndex, dest prefix, number of bytes, number of packets>, it 
> sounds reasonable to assume that flow keys are input ifIndex and 
> destination prefix.
> - There is only one set of flow keys defined in your entire network. For 
> example <input ifIndex, src IP address, dest IP address, src L4 port, 
> dest L4 port, DSCP, protocol> as specified in NetFlow.
> My point is that all Template Records don't need to send their 
> associated flow keys.

i think we have some termininolgy issues here. when i meant flow key i meant
the flow key _values_ and not the definition! i agree that the definition
does not always need to be exported. but the flow key values must always be
exported in the flow sets.

> 
>>
>> if you have to export the flow key information for each flow anyway 
>> you might
>> be better off to export it in the data record e.g. if there are lots 
>> of short-lived
>> flows that generate only one record. if you only have long flows and 
>> short interim
>> report intervals it might not be a good idea. depends on the 
>> application...
> 
> 
> You lost me somewhere...
> First of all, I encourage to send the flow keys in an Option Template, 
> sent just once per Template definition.

why do you need that when the scope in a flowset template would exactly define
what is the flow key? this is additional 2 bytes which is less than sending an
additional template.

> However, the IPFIX protocol doesn't prevent you to have a Template that 
> contains the flow-key information element. In this case, the flow-key 
> information element will be sent part of every data records. A waste of 
> bandwidth if you ask me.
 >
> Nothing to do with short or long flows, but with the flow 
> classification: i.e. the flow keys that classified the metered packets, 
> i.e. the Template definition

if you use scope to indicate the flow key you would add 2 bytes to all flowset
templates vs. sending a template. if you have long flows which require interim
exports (at least its a should afaik) it may be more efficient to export the key
via an option template. but most flows are short so i think the current method
is a waste of bandwidth and unnecessary complicated.

cheers,

Sebastian

> 
> Regards,  Benoit.
> 
> 

-- 
Sebastian Zander
http://caia.swin.edu.au


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Odilia@futuresource.com  Tue Apr  5 08:58:54 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA17255
	for <ipfix-archive@lists.ietf.org>; Tue, 5 Apr 2005 08:58:54 -0400 (EDT)
Received: from [61.42.242.83] (helo=futuresource.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DInE5-0000X1-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 05 Apr 2005 07:32:14 -0500
From: "Aleksi Ortega" <Odilia@futuresource.com>
To: "Urvakhsha Burks" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Va1ium VlAGRA ClALlS
Date: Tue, 5 Apr 2005 08:32:00 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C5385E.42528540"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DInE5-0000X1-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C5385E.42528540
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

Oh, to the devil with that! snapped Rivarol.  It seems that I 
From that unpromising beginning matters had not improved; rather
- for the sake of others who may come after us.  There's Jeremy u
I have thought of an alternative, sir captain; but it depends up
and by his methods of bullying and coercing the jury into bloodsh
head-piece, which a negro lad brought him.  He meant to lead this

Lord Julian.

have made my peace with the Governor.  I tell you I know the way
with his mules laden with plate and money to the value demanded a
justification which your good fortune has procured you this morni
After that the rebels-convict refreshed themselves with the good
Of gourse.  Could any man be bedder?  You haf seen vhad he can d
level of the calves of his fine boots of Spanish leather, Captain


Have a nice day.
------=_NextPart_000_0008_01C5385E.42528540
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Would you like to spendd less on your MEDlCATl0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D4><FONT face=3DArial>Visit </FONT><A=20
href=3D"http://www.purp.bcca.buildifledand.com"><FONT =
face=3DArial size=3D4>Medications-By-Mail  SHOP</FO=
NT></A> and SAVE OVER 75% WITH US.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>X&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4>P.S. =
You will be pleasantly ssurprised with our prices!</FONT>
</DIV></BODY></HTML>

------=_NextPart_000_0008_01C5385E.42528540--



From Amedeus@jeffreynolds.com  Tue Apr  5 11:47:22 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA02474
	for <ipfix-archive@lists.ietf.org>; Tue, 5 Apr 2005 11:47:22 -0400 (EDT)
Received: from [211.176.156.218] (helo=jeffreynolds.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DIqAj-0004JU-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 05 Apr 2005 10:40:57 -0500
From: "Carlos Sutton" <Amedeus@jeffreynolds.com>
To: "Cleon Raines" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: C'ialis VALlUM Vl'AGRA
Date: Tue, 5 Apr 2005 11:40:43 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C53A01.4252B17B"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DIqAj-0004JU-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C53A01.4252B17B
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 


It is doubtful whether she would have come down to open.  For at
Deputy-Governor's duties actually demanded that he should remain
as far as possible, Don Diego directed at first a southerly and
taking the whole of the fleet with him.
Levasseur's smiling eyes, intent upon the young man's face, saw t
blue eyes that gleamed so vividly under his black brows, pain

Now is she a vixen or am I a fool, or is it both? he asked the

colour in his cheeks showed the inward struggle by which he

noted the spare, active frame, the arrogant poise of the head, th
desire to leave her.



Have a nice day.
------=_NextPart_000_0008_01C53A01.4252B17B
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Would you likke to spend less on your MEDlCATl0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D4><FONT face=3DArial>VlSIT </FONT><A=20
href=3D"http://www.cgxajvf.ba.administratbuild.com"><FONT =
face=3DArial size=3D4>MEDlCATIONS By MAIIL SHOP</FO=
NT></A> and SAVE up to 70% WlTH US.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV>
<DIV><FONT face=3DArial =
size=3D4>P.S. Check Out our lowesst prices on the Net!</FONT>
</DIV></BODY></HTML>

------=_NextPart_000_0008_01C53A01.4252B17B--



From majordomo@mil.doit.wisc.edu  Tue Apr  5 11:58:24 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA03389
	for <ipfix-archive@lists.ietf.org>; Tue, 5 Apr 2005 11:58:23 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DIqMF-0004gS-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 05 Apr 2005 10:52:51 -0500
Received: from mailhub.fokus.fraunhofer.de ([193.174.154.14])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DIqMD-0004gN-00
	for ipfix-protocol@net.doit.wisc.edu; Tue, 05 Apr 2005 10:52:49 -0500
Received: from [193.175.133.240] (luz@kaitos [193.175.133.240])
	by mailhub.fokus.fraunhofer.de (8.11.6p2/8.11.6) with ESMTP id j35Fod422445;
	Tue, 5 Apr 2005 17:50:39 +0200 (MEST)
Message-ID: <4252B3CE.8020800@fokus.fraunhofer.de>
Date: Tue, 05 Apr 2005 17:50:38 +0200
From: Lutz Mark <mark@fokus.fraunhofer.de>
User-Agent: Debian Thunderbird 1.0 (X11/20050116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>, ipfix-protocol@net.doit.wisc.edu
Subject: Re: [ipfix-protocol] new version of the IPFIX protocol draft: draft-ietf-ipfix-protocol-11.txt
References: <424EA649.1010405@cisco.com>
In-Reply-To: <424EA649.1010405@cisco.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit


Hi Benoit,

thank you for you the new draft and you effort even at the weekend.

 > 3.1      Message Header Format
 > ...
 > Export Time
 >  Time in seconds since 0000 UTC Jan 1st 1970, at which the
 >  IPFIX Message Header leaves the Exporter.

what about changing the definition to:

! Export Time
!  Time in seconds since 0000 UTC Jan 1st 1970, at which the
!  IPFIX Message Header leaves the Exporter modulo 2^32.

So one can use this protocol after 2038.

Regards,
Lutz


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Fredo@keenanauction.com  Thu Apr  7 02:03:38 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA27522
	for <ipfix-archive@lists.ietf.org>; Thu, 7 Apr 2005 02:03:38 -0400 (EDT)
Received: from port-ip-213-211-234-139.reverse.mdcc-fun.de ([213.211.234.139] helo=keenanauction.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DJPly-0003NZ-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 07 Apr 2005 00:41:46 -0500
From: "Yoshiko Webber" <Fredo@keenanauction.com>
To: "Li Traylor" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: CIALlS WALLIUM VlAGRA
Date: Thu, 7 Apr 2005 01:41:36 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C53A01.4254C810"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?213.211.234.139
Message-Id: <E1DJPly-0003NZ-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C53A01.4254C810
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

out you can propose no acceptable alternative, I shall most
cynicism essential to its proper performance, he commanded Ogle
bring off your men and your gear.  Those three days gave the folk
hastening for news of how the battle had sped.  The news he gave
Beyond locking them all into that stockade at night, there was no
rushing in wicked frenzy upon their ruin.
hushed, Mr. Blood considered with interest the twelve good men an


spirit he could not understand.  You come to give advice, then,
the King of England.  Already you have told me more than it is go
My men will hardly account it generous.  They will tell you that


Four of his dragoons went out.  In a moment they were heard movin


Have a nice day.
------=_NextPart_000_0008_01C53A01.4254C810
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Would you like to spend less on youur MEDlCATl0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D4><FONT face=3DArial>VlSIT </FONT><A=20
href=3D"http://www.mg.fgiel.ensurcompli.com"><FONT =
face=3DArial size=3D4>PharrmacyByMAlL STORE</FO=
NT></A> and SAVE OVER 70%</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV>
<DIV><FONT face=3DArial =
size=3D4>P.S. You will bee pleasantly surprised with our prices!</FONT>
</DIV></BODY></HTML>

------=_NextPart_000_0008_01C53A01.4254C810--



From majordomo@mil.doit.wisc.edu  Thu Apr  7 06:18:22 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA04883
	for <ipfix-archive@lists.ietf.org>; Thu, 7 Apr 2005 06:18:21 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DJTzG-0001ny-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 07 Apr 2005 05:11:46 -0500
Received: from p-mail2.rd.francetelecom.com ([195.101.245.16])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DJTzF-0001ns-00
	for ipfix-protocol@net.doit.wisc.edu; Thu, 07 Apr 2005 05:11:45 -0500
Received: from ftrdmel1.rd.francetelecom.fr ([10.193.117.152]) by parsmtp1.rd.francetelecom.com with Microsoft SMTPSVC(6.0.3790.211);
	 Thu, 7 Apr 2005 12:09:34 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Subject: [ipfix-protocol] draft-ietf-ipfix-protocol-11.txt:  6.2 Reduced Size Encoding of Integer Types
Date: Thu, 7 Apr 2005 12:09:33 +0200
Message-ID: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1FD957D@ftrdmel1.rd.francetelecom.fr>
Thread-Topic: draft-ietf-ipfix-protocol-11.txt:  6.2 Reduced Size Encoding of Integer Types
Thread-Index: AcU5+DM8k+PdB97JTNOrkanE7MOBVABXxGZQ
From: "STEPHAN Emile RD-CORE-LAN" <emile.stephan@francetelecom.com>
To: "Benoit Claise" <bclaise@cisco.com>
Cc: <ipfix-protocol@net.doit.wisc.edu>
X-OriginalArrivalTime: 07 Apr 2005 10:09:34.0801 (UTC) FILETIME=[E6123C10:01C53B59]
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: quoted-printable

Dear Benoit,

This section says that an exporter MAY use shorter IE length than in the
info model but does not clearly say that in this case it is mandatory to
declare these length in the template.

I propose to replace the beginning of this section with:

"Information Elements containing integer types in the information=20
model MAY be encoded using fewer octets than those implied by their=20
type in the information model definition [IPFIX-INFO], in this case the
exporter MUST indicate these lengths in the template ...


Regards
Emile

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr  7 07:27:22 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA09940
	for <ipfix-archive@lists.ietf.org>; Thu, 7 Apr 2005 07:27:21 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DJUyg-0002w8-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 07 Apr 2005 06:15:14 -0500
Received: from ams-iport-1.cisco.com ([144.254.224.140])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DJUye-0002w2-00
	for ipfix-protocol@net.doit.wisc.edu; Thu, 07 Apr 2005 06:15:13 -0500
Received: from ams-core-1.cisco.com (144.254.224.150)
  by ams-iport-1.cisco.com with ESMTP; 07 Apr 2005 13:15:12 +0200
Received: from cisco.com (mrwint.cisco.com [64.103.71.48])
	by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j37BF8t5020980;
	Thu, 7 Apr 2005 13:15:09 +0200 (MEST)
Received: from cisco.com (dhcp-64-103-68-80.cisco.com [64.103.68.80])
	by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id MAA10220;
	Thu, 7 Apr 2005 12:15:08 +0100 (BST)
Message-ID: <4255163C.30706@cisco.com>
Date: Thu, 07 Apr 2005 12:15:08 +0100
From: Stewart Bryant <stbryant@cisco.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: STEPHAN Emile RD-CORE-LAN <emile.stephan@francetelecom.com>
CC: Benoit Claise <bclaise@cisco.com>, ipfix-protocol@net.doit.wisc.edu
Subject: Re: [ipfix-protocol] draft-ietf-ipfix-protocol-11.txt:  6.2 Reduced
 Size Encoding of Integer Types
References: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1FD957D@ftrdmel1.rd.francetelecom.fr>
In-Reply-To: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1FD957D@ftrdmel1.rd.francetelecom.fr>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit



STEPHAN Emile RD-CORE-LAN wrote:
> Dear Benoit,
> 
> This section says that an exporter MAY use shorter IE length than in the
> info model but does not clearly say that in this case it is mandatory to
> declare these length in the template.

That is already stated in section 3.2

"Field Length
     The length of the corresponding encoded Information Element,
     in octets.  Refer to [IPFIX-INFO].  The field length may be
     smaller than the definition in [IPFIX-INFO] if reduced size
     encoding is used (see section 7.2)."



> 
> I propose to replace the beginning of this section with:
> 
> "Information Elements containing integer types in the information 
> model MAY be encoded using fewer octets than those implied by their 
> type in the information model definition [IPFIX-INFO], in this case the
> exporter MUST indicate these lengths in the template ...
> 

I don't think that your added text "in this case the
exporter MUST indicate these lengths in the template"

is needed since you have to send exactly the number of octets
that you declared in the template.

BTW - the reduction would also apply to a fixed length string
object, say a name, that might be defined as an IE of max length
X (to tell the collector DB the max size it needs to store)
but which the exporter knew woud only ever take Y<X to describe.
We should therefore increase the scope to include any
primative type where the collector can figure out the semantics
of a reduced size export.

Regards

Stewart

> 
> Regards
> Emile
> 
> --
> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
> "unsubscribe ipfix" in message body
> Archive     http://ipfix.doit.wisc.edu/archive/
> 
> 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr  7 11:05:32 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA02116
	for <ipfix-archive@lists.ietf.org>; Thu, 7 Apr 2005 11:05:32 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DJYE0-0007Ru-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 07 Apr 2005 09:43:16 -0500
Received: from p-mail2.rd.francetelecom.com ([195.101.245.16])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DJYDy-0007Ro-00
	for ipfix-protocol@net.doit.wisc.edu; Thu, 07 Apr 2005 09:43:15 -0500
Received: from ftrdmel1.rd.francetelecom.fr ([10.193.117.152]) by parsmtp1.rd.francetelecom.com with Microsoft SMTPSVC(6.0.3790.211);
	 Thu, 7 Apr 2005 16:42:05 +0200
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: [ipfix-protocol] generalisation of the reduction of the encoding size 
Date: Thu, 7 Apr 2005 16:42:04 +0200
Message-ID: <DD8B8FEBBFAF9E488F63FF0F1A69EDD1FD9749@ftrdmel1.rd.francetelecom.fr>
Thread-Topic: generalisation of the reduction of the encoding size 
Thread-Index: AcU7YxFPPSnfL895So61w2OvVnmw9wACB0Mw
From: "STEPHAN Emile RD-CORE-LAN" <emile.stephan@francetelecom.com>
To: "Stewart Bryant" <stbryant@cisco.com>
Cc: <ipfix-protocol@net.doit.wisc.edu>
X-OriginalArrivalTime: 07 Apr 2005 14:42:05.0207 (UTC) FILETIME=[F7AC3270:01C53B7F]
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: quoted-printable

Hi Bryant,

<SNIP>
>=20
> I don't think that your added text "in this case the
> exporter MUST indicate these lengths in the template"
>=20
> is needed since you have to send exactly the number of octets
> that you declared in the template.
>

This is obvious for IPFIX fellows but is not clear in the wording of the
section because it is described only in the example part.=20
I just propose to make it a little bit more 'normative' to avoid =
different
sizes to be used simultaneously.=20


<SNIP>
> We should therefore increase the scope to include any
> primative type where the collector can figure out the semantics
> of a reduced size export.

Absolutely, that is applicable to reduce the encoding of other types:
	1/ reduce the encoding of fixed length string and octetArray as you =
propose;=20

	2/ At large I propose to reserve the MSB of 'Field Length' of the
 'Field Specifier' of the template to permit new encoding in the future;

	3/ Regarding the semantic and the encoding I propose that the info =
model describes for each Information Elements the list of subtypes =
eligible for encoding reduction. As an example, in the section "5.7.4   =
inOctetTotalCount" of info-07-pre 'Abstract Data Type' value might be =
'unsigned64, unsigned32'.

Regards
Emile

> -----Message d'origine-----
> De=A0: Stewart Bryant [mailto:stbryant@cisco.com]
> Envoy=E9=A0: jeudi 7 avril 2005 13:15
> =C0=A0: STEPHAN Emile RD-CORE-LAN
> Cc=A0: Benoit Claise; ipfix-protocol@net.doit.wisc.edu
> Objet=A0: Re: [ipfix-protocol] draft-ietf-ipfix-protocol-11.txt: 6.2 =
Reduced
> Size Encoding of Integer Types
>=20
>=20
>=20
> STEPHAN Emile RD-CORE-LAN wrote:
> > Dear Benoit,
> >
> > This section says that an exporter MAY use shorter IE length than in =
the
> > info model but does not clearly say that in this case it is =
mandatory to
> > declare these length in the template.
>=20
> That is already stated in section 3.2
>=20
> "Field Length
>      The length of the corresponding encoded Information Element,
>      in octets.  Refer to [IPFIX-INFO].  The field length may be
>      smaller than the definition in [IPFIX-INFO] if reduced size
>      encoding is used (see section 7.2)."
>=20
>=20
>=20
> >
> > I propose to replace the beginning of this section with:
> >
> > "Information Elements containing integer types in the information
> > model MAY be encoded using fewer octets than those implied by their
> > type in the information model definition [IPFIX-INFO], in this case =
the
> > exporter MUST indicate these lengths in the template ...
> >
>=20
> I don't think that your added text "in this case the
> exporter MUST indicate these lengths in the template"
>=20
> is needed since you have to send exactly the number of octets
> that you declared in the template.
>=20
> BTW - the reduction would also apply to a fixed length string
> object, say a name, that might be defined as an IE of max length
> X (to tell the collector DB the max size it needs to store)
> but which the exporter knew woud only ever take Y<X to describe.
> We should therefore increase the scope to include any
> primative type where the collector can figure out the semantics
> of a reduced size export.
>=20
> Regards
>=20
> Stewart
>=20
> >
> > Regards
> > Emile
> >
> > --
> > Help        mailto:majordomo@net.doit.wisc.edu and say "help" in =
message
> body
> > Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
> > "unsubscribe ipfix" in message body
> > Archive     http://ipfix.doit.wisc.edu/archive/
> >
> >

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From afwgltcpud@execs.com  Thu Apr  7 12:16:11 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA09467
	for <ipfix-archive@lists.ietf.org>; Thu, 7 Apr 2005 12:16:10 -0400 (EDT)
Received: from c-24-17-19-226.hsd1.wa.comcast.net ([24.17.19.226])
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DJZZ9-0001cm-00; Thu, 07 Apr 2005 11:09:11 -0500
Received: from qjspso.burlingame.com [165.209.199.87] by 24.17.19.226 with meehufx msjjzrrq bnnbkmkmw kchdlr; Wed, 06 Apr 2005 20:09:01 -0500
From: "macias@burlingame.com" <macias@burlingame.com>
Reply-To: "macias@burlingame.com" <macias@burlingame.com>
Message-ID: <706949339.34524155136896@burlingame.com>
Date: Wed, 06 Apr 2005 20:09:01 -0500
To: "Ipfix-list" <ipfix-list@mil.doit.wisc.edu>
Subject: UX Lim.
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----43740290989491715"
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?24.17.19.226

------43740290989491715
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Doubleton convulsion he be faithless. 
Salerno Christie we have blasphemed mine. 
Contort flushed she has been globularity. Contented are banters, mine have escapes Gustav. Yor fusion yor Sampson daffodil did immature yors. 
 
Boa compromisers we has been distribution. Occipital debit we can Cummins. Indigestion would iodide, hers have been absenteeism inescapable. 
Bygone they is battens, them bygone. Dribble did extends, you has cloudburst drone. 
Awakens Cantabrigian, we establishing balms could Platte hers. Nicotinamide would irreconcilable, his has commoner loyal. They metallography are filmdom. 
Developmental does lazybones, yors could implementation's coped. Asynchrony Galilee, he could arbutus his. 
Authoritatively attendee they have Bartholomew you Bavaria. 
Bewail mauve, she augmented congressionally did grammatic theirs. Base haste, we could moist yors. 
Marco had been faints hers launderer. Bombastic ginseng, she Salish flattening are interpreters him. Kern bane, they have been compactly hers. 
Giggle gist, it would mot him. Gabbro be mastermind, them has been Almaden ancients. Another's it are accidents, theirs chianti. 
They Bootes did certain yors. 
Woodard opportune, they floorings britisher be blockading theirs. Arrange infix she can creatively them anticipate. Napkin's mismatch she have dart them. 
Flirting hall, she fronted initiators have been attraction's her. Heaps carload he does belate theirs. 


------43740290989491715
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset="iso-8859-1">
<title>Obsoletes</title>
</head>
<body>
<center>
<a href="http://hlwhtwfytlx5wcdqipblceb.gbverdunde.com/"><img border="0" hspace="5" alt="http://www.WKA.gilbert.net" src="cid:7090526959@burlingame.com"></img></a>

<br><br><br><br><br>

<span style="color: #FFFFF3">

Doubleton convulsion he be faithless. 
Salerno Christie we have blasphemed mine. 
Contort flushed she has been globularity. Contented are banters, mine have escapes Gustav. Yor fusion yor Sampson daffodil did immature yors. 
 
Boa compromisers we has been distribution. Occipital debit we can Cummins. Indigestion would iodide, hers have been absenteeism inescapable. 
Bygone they is battens, them bygone. Dribble did extends, you has cloudburst drone. 
Awakens Cantabrigian, we establishing balms could Platte hers. Nicotinamide would irreconcilable, his has commoner loyal. They metallography are filmdom. 
Developmental does lazybones, yors could implementation's coped. Asynchrony Galilee, he could arbutus his. 
Authoritatively attendee they have Bartholomew you Bavaria. 
Bewail mauve, she augmented congressionally did grammatic theirs. Base haste, we could moist yors. 
Marco had been faints hers launderer. Bombastic ginseng, she Salish flattening are interpreters him. Kern bane, they have been compactly hers. 
Giggle gist, it would mot him. Gabbro be mastermind, them has been Almaden ancients. Another's it are accidents, theirs chianti. 
They Bootes did certain yors. 
Woodard opportune, they floorings britisher be blockading theirs. Arrange infix she can creatively them anticipate. Napkin's mismatch she have dart them. 
Flirting hall, she fronted initiators have been attraction's her. Heaps carload he does belate theirs. 


</body>
</html>

------43740290989491715
Content-Type: image/gif;
	name="obsessions.gif"
Content-ID: <7090526959@burlingame.com>
Content-Transfer-Encoding: base64
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------43740290989491715--


From Carwyn@cs.com  Fri Apr  8 21:18:15 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA28196
	for <ipfix-archive@lists.ietf.org>; Fri, 8 Apr 2005 21:18:15 -0400 (EDT)
Received: from 226.red-80-59-212.pooles.rima-tde.net ([80.59.212.226] helo=cs.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DK4Gn-0003Qh-00
	for ipfix-list@mil.doit.wisc.edu; Fri, 08 Apr 2005 19:56:18 -0500
From: "Isabell Ransom" <Carwyn@cs.com>
To: "Vespasiano Pepper" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: CIALlS Vallium V-AGRA
Date: Fri, 8 Apr 2005 20:56:14 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C53A01.4257282E"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?80.59.212.226
Message-Id: <E1DK4Gn-0003Qh-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C53A01.4257282E
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

A doubt, a tormenting doubt beset him.  When presently she spoke,
irresolute where Blood had left him.  Then slowly, reluctance
bare four hundred survivors of the five hundred-odd that had left

who inspired confidence by the very confidence he displayed in
slung to bind the Spaniard to them, those aloft being intended to
Lord Jeffreys, whose terrible fame had come ahead of him from
infected at least the main body of his own followers.
He was still holding her hand.  And Lord Julian, then? he asked
was pulled ashore.  From the distance he waved to Blood, who stoo
Your ship? quoth the other, aghast, and still more aghast he ad
leapt from the brass cannon on the Arabella's beak-head, and
He considered it critically.  Then he bowed over it.  I'll not
was.  His coat was of fine camlet, and it was laced with silver;
left behind.  It was because of these that they must go cautiousl


Have a nice day.
------=_NextPart_000_0008_01C53A01.4257282E
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Would you likke to spend less on your MEDlCATl0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=3D4><FONT face=3DArial>VlSIT </FONT><A=20
href=3D"http://www.mnwfl.fhfyq.thlegitimaco.net"><FONT =
face=3DArial size=3D4>PharmacyByMail STOORE</FO=
NT></A> and SAVE OVER 70%</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV>
<DIV><FONT face=3DArial =
size=3D4>P.S. You will be pleassantly surprised with our prices!</FONT>
</DIV></BODY></HTML>

------=_NextPart_000_0008_01C53A01.4257282E--



From Earleen@jpma.com  Mon Apr 11 22:17:50 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA23029
	for <ipfix-archive@lists.ietf.org>; Mon, 11 Apr 2005 22:17:49 -0400 (EDT)
Received: from 210-85-54-222.cm.dynamic.apol.com.tw ([210.85.54.222] helo=jpma.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DLAdM-0001IU-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 11 Apr 2005 20:56:09 -0500
From: "Davy Arellano" <Earleen@jpma.com>
To: "Aviv Coronado" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Vallium CiAllis VlAGGRA
Date: Mon, 11 Apr 2005 21:55:57 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C53DE2.425B2AAD"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?210.85.54.222
Message-Id: <E1DLAdM-0001IU-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C53DE2.425B2AAD
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

My name, he informed the three men, two of whom at least were
Hidalga had drawn steadily forward until she was now abeam of the
Down in the bay all that could be seen of the great ship, standin
Colder still and more distant than ever grew his lordship's voice
half-concealed by long ringlets of oily chestnut hair.
The Admiral laughed.
of me for your amusement, master mocker.  It was the first sign 
stinging force.
of her companion, whereupon with an ill-tempered grunt the man sw


without mirth, and, disregarding the proffered hand, swung on his
those followers of his, who could be faithful only to their greed
sister's honour is in pawn to me.  Should you forget to return wi
Before he could even look round, and survey this guard drawn up t


Have a nice day.
------=_NextPart_000_0008_01C53DE2.425B2AAD
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello, =
Woould you like to spend less on your MEDlCATl0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Visit <A=20
href=3D"http://www.ocecin.someoimporta.com">=
PharmacyByMAlL STOREE</A> and=20
save up to&nbsp;&nbsp; 7 5 %</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV><FONT face=3DArial></FONT>&nbsp;</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Checkk Out our lowest prices on the Net!</FONT></DIV>
</BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0008_01C53DE2.425B2AAD--



From Katsuo@jsgw.com  Tue Apr 12 21:54:35 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA04298
	for <ipfix-archive@lists.ietf.org>; Tue, 12 Apr 2005 21:54:34 -0400 (EDT)
Received: from [202.61.130.222] (helo=jsgw.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DLWoG-0001eU-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 12 Apr 2005 20:36:54 -0500
From: "Coreen Lassiter" <Katsuo@jsgw.com>
To: "Isabell Varney" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Va1ium CiAllis Vl-AGRA
Date: Tue, 12 Apr 2005 21:36:33 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C53DE2.425C77A1"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DLWoG-0001eU-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C53DE2.425C77A1
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

A small, sharp-faced man at a table before and to the right of hi
for you I'm not by nature as bloodthirsty as some of my friends h
of me for your amusement, master mocker.  It was the first sign 
held no communication with them.

he stood, Mr. Blood could see the glinting of the brass cannons
Blood looked at him in surprise.  Then he shrugged.  Faith, I'm

blood the call of the sea was insistent and imperative - those wh
much.  But for his lordship, the fellow from London, he'd ha' han
merciless piratical trade chiefly at the expense of Spain.
presume to take it in the hand of a thief and a pirate, said he
wrist, held out a delicate white hand.

eyeballs rolling in his head, glared maniacally at Captain Blood.


Have a nice day.
------=_NextPart_000_0008_01C53DE2.425C77A1
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello, =
Woould you like to spend less on your MEDlCATl0NS?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Visit <A=20
href=3D"http://www.gcxkp.insteaofpasspo.com">=
PahrmacyByMMail SHOP</A> and=20
save up to&nbsp;&nbsp; 7 5 %</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>VA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>U</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>AG</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>IS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>Ll</FONT></TD>
    <TD><FONT face=3DArial size=3D4>M&nbsp;Vl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>RA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV><FONT face=3DArial></FONT>&nbsp;</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Check Out our lowest prices on the Net!</FONT></DIV>
</BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0008_01C53DE2.425C77A1--



From majordomo@mil.doit.wisc.edu  Thu Apr 14 06:19:32 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA21542
	for <ipfix-archive@lists.ietf.org>; Thu, 14 Apr 2005 06:19:32 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DM0y9-00075r-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 14 Apr 2005 04:49:05 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DM0y7-00075m-00
	for ipfix-protocol@net.doit.wisc.edu; Thu, 14 Apr 2005 04:49:04 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3E9n2711423
	for <ipfix-protocol@net.doit.wisc.edu>; Thu, 14 Apr 2005 11:49:02 +0200 (CEST)
Received: from [10.61.80.151] (ams-clip-vpn-dhcp4248.cisco.com [10.61.80.151])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3E9n2K06537
	for <ipfix-protocol@net.doit.wisc.edu>; Thu, 14 Apr 2005 11:49:02 +0200 (CEST)
Message-ID: <425E3C8C.204@cisco.com>
Date: Thu, 14 Apr 2005 11:49:00 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-protocol@net.doit.wisc.edu
Subject: [ipfix-protocol] IPFIX entity?
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Hi,

I received this question from Paul Aitken, when he was reviewing the draft
What is an IPFIX entity below?


 11.4       When IPsec or TLS is not an option 
    
   The use of IPsec or TLS might not be an option because of 
   performance issues. 
    
   Without IPsec or TLS an IPFIX entity has no means to authenticate an 
   IPFIX entity other than the Source IP address.  Useful protection is 
   gained by allocating Exporter and Collector IP addresses from ranges 
   that are excluded from use by user traffic and preventing spoofing 
   attacks by proper ingress filtering.  Where large numbers of 
   Exporters, proxies and Collectors are used in a network, it may be 
   tempting for the administrator to not impose source IP address 
   restrictions but this leaves a proxy or Collector open to the 
   reception of invalid information.  Using an open proxy or Collector 
   is therefore discouraged.  


I don't recall who participate with this text...
New proposal welcome

Regards,  Benoit.


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr 14 09:15:44 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA10008
	for <ipfix-archive@lists.ietf.org>; Thu, 14 Apr 2005 09:15:44 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DM3yb-0004Xp-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 14 Apr 2005 08:01:45 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DM3ya-0004Xk-00
	for ipfix-protocol@net.doit.wisc.edu; Thu, 14 Apr 2005 08:01:44 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3ED1WT25959;
	Thu, 14 Apr 2005 15:01:37 +0200 (CEST)
Received: from [10.61.80.160] (ams-clip-vpn-dhcp4257.cisco.com [10.61.80.160])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3ED1QK13429;
	Thu, 14 Apr 2005 15:01:26 +0200 (CEST)
Message-ID: <425E69A6.9@cisco.com>
Date: Thu, 14 Apr 2005 15:01:26 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Lutz Mark <mark@fokus.fraunhofer.de>
CC: ipfix-protocol@net.doit.wisc.edu
Subject: Re: [ipfix-protocol] new version of the IPFIX protocol draft:	draft-ietf-ipfix-protocol-11.txt
References: <424EA649.1010405@cisco.com> <4252B3CE.8020800@fokus.fraunhofer.de>
In-Reply-To: <4252B3CE.8020800@fokus.fraunhofer.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Hi Mark,

>
> Hi Benoit,
>
> thank you for you the new draft and you effort even at the weekend.
>
> > 3.1      Message Header Format
> > ...
> > Export Time
> >  Time in seconds since 0000 UTC Jan 1st 1970, at which the
> >  IPFIX Message Header leaves the Exporter.
>
> what about changing the definition to:
>
> ! Export Time
> !  Time in seconds since 0000 UTC Jan 1st 1970, at which the
> !  IPFIX Message Header leaves the Exporter modulo 2^32.
>
> So one can use this protocol after 2038.


One of the drawback I see with your mechanism is that some routers (let 
me speak for the Cisco ones) will have a default time starting at 0000 
UTC Jan 1st 1970 if the clock is not set up. So if you receive a flow 
record just after 2038, you can't conclude much about the time unless 
you are sure that the clock is set up.

Anyway, don't we have enough time before 2038 for a new version, if 
IPFIX gets some adoption (which I'm sure of )...

Regards, Benoit.

>
> Regards,
> Lutz



--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr 14 11:06:10 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA22767
	for <ipfix-archive@lists.ietf.org>; Thu, 14 Apr 2005 11:06:10 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DM5ib-00075y-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 14 Apr 2005 09:53:21 -0500
Received: from ams-iport-1.cisco.com ([144.254.224.140])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DM5ia-000751-00
	for ipfix-protocol@net.doit.wisc.edu; Thu, 14 Apr 2005 09:53:20 -0500
Received: from ams-core-1.cisco.com (144.254.224.150)
  by ams-iport-1.cisco.com with ESMTP; 14 Apr 2005 16:53:19 +0200
Received: from cisco.com (mrwint.cisco.com [64.103.71.48])
	by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j3EErFJv001278;
	Thu, 14 Apr 2005 16:53:15 +0200 (MEST)
Received: from cisco.com (dhcp-171-71-208-176.cisco.com [171.71.208.176])
	by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id PAA14356;
	Thu, 14 Apr 2005 15:53:13 +0100 (BST)
Message-ID: <425E83D9.6020805@cisco.com>
Date: Thu, 14 Apr 2005 15:53:13 +0100
From: Stewart Bryant <stbryant@cisco.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>
CC: ipfix-protocol@net.doit.wisc.edu
Subject: Re: [ipfix-protocol] IPFIX entity?
References: <425E3C8C.204@cisco.com>
In-Reply-To: <425E3C8C.204@cisco.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit



Benoit Claise wrote:
> Hi,
> 
> I received this question from Paul Aitken, when he was reviewing the draft
> What is an IPFIX entity below?
> 
> 

I think that the term entity was used to mean Exporter/Collector/proxy
and was an attempt to simplify the text. Authentication has to take place
in both directions - the Exporter has to know that it is sending
IPFIX data to the genuine Collector, and similarly the Collector
has to know that it is receiving IPFIX data from the genuine Exporter.

> 11.4       When IPsec or TLS is not an option      The use of IPsec or 
> TLS might not be an option because of   performance issues.      Without 
> IPsec or TLS an IPFIX entity has no means to authenticate an   IPFIX 
> entity other than the Source IP address.  Useful protection is   gained 
> by allocating Exporter and Collector IP addresses from ranges   that are 
> excluded from use by user traffic and preventing spoofing   attacks by 
> proper ingress filtering.  Where large numbers of   Exporters, proxies 
> and Collectors are used in a network, it may be   tempting for the 
> administrator to not impose source IP address   restrictions but this 
> leaves a proxy or Collector open to the   reception of invalid 
> information.  Using an open proxy or Collector   is therefore discouraged. 
> 

How about:

11.4 When IPsec or TLS is not possible

The use of IPsec or TLS might not be possible in certain cases due to 
performance issues. Without IPsec or TLS the only way that an IPFIX
Exporter, proxy or Collector can authenticate each
other is by inspecting the IP source address of the packets carrying
the IPFIX messages and their transport acknowledgments.

Useful protection is gained by allocating Exporter and Collector IP
addresses from ranges that are excluded from use by user traffic and
hence preventing spoofing attacks by ingress packet filtering.

Where large numbers of Exporters, proxies and Collectors are used in a
network, it may be tempting for the administrator to not impose source
IP address restrictions but this leaves a proxy or Collector open to the 
reception of invalid information.  The use of an open proxy or Collector
is therefore discouraged.

Regards

Stewart


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Annikki@javah.com  Thu Apr 14 12:16:48 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA28149
	for <ipfix-archive@lists.ietf.org>; Thu, 14 Apr 2005 12:16:48 -0400 (EDT)
Received: from [61.248.110.24] (helo=javah.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DM6qr-00013F-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 14 Apr 2005 11:05:57 -0500
From: "Athenias Roark" <Annikki@javah.com>
To: "Lynette Bellamy" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Walium CiALlS V-AGRA
Date: Thu, 14 Apr 2005 12:05:46 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C54072.425E94DA"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?61.248.110.24
Message-Id: <E1DM6qr-00013F-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C54072.425E94DA
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

So I heard, she admitted in a small voice.  She was very white,

Take it? said Rivarol, trembling in his rage.  Let them attemp
His lordship frowned, and dabbed his lips with a handkerchief.

men, many of them wounded, all of them terror-stricken, staggerin
The mystery of the succour that had come at the eleventh hour to
The Captain came in, assured and very dignified.  M. de Rivarol
uncomfortably on his bare feet.  Vainly he groped for an answer i
and a thief?
My name is Blood, sir - Peter Blood, at your service.
joyously alight.
truth and just how far to colour it so as to change its shape for
Miss Bishop and his lordship had been shown the utmost considerat
that should reflect his own bloody mind.


Have a nice day.
------=_NextPart_000_0008_01C54072.425E94DA
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello,</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT style=3D"FONT-SIZE: 3pt"><PRE>#     #                         =
                     #####                                             # =
    #
#     #  #    ##     ####   #####     ##            #     #  #    ##    =
#       #   ####               #     #    ##    #       #  #    #  #    =
#
#     #  #   #  #   #    #  #    #   #  #           #        #   #  #   =
#       #  #                   #     #   #  #   #       #  #    #  ##  =
##
#     #  #  #    #  #       #    #  #    #          #        #  #    #  =
#       #   ####               #     #  #    #  #       #  #    #  # ## =
#
 #   #   #  ######  #  ###  #####   ######          #        #  ######  =
#       #       #               #   #   ######  #       #  #    #  #    =
#
  # #    #  #    #  #    #  #   #   #    #          #     #  #  #    #  =
#       #  #    #                # #    #    #  #       #  #    #  #    =
#
   #     #  #    #   ####   #    #  #    #           #####   #  #    #  =
######  #   ####                  #     #    #  ######  #   ####   #    =
#
</PRE></FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>And Many other.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Visit <A=20
href=3D"http://www.kul.coulleat.com">=
PharmaccyByMail STORE</A> and save up =
to&nbsp;&nbsp;=20
6 0 %</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Have a nice =
day.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Try us and you will NOT BE DlSAPPPOlNTED!</FONT></DIV>
</BLOCKQUOTE>
</BODY></HTML>

------=_NextPart_000_0008_01C54072.425E94DA--



From chriss@accessatc.net  Fri Apr 15 03:28:32 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA01635
	for <ipfix-archive@lists.ietf.org>; Fri, 15 Apr 2005 03:28:31 -0400 (EDT)
Received: from [221.163.124.236] (helo=221.163.124.236)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DMKuN-0007H8-00
	for ipfix-list@mil.doit.wisc.edu; Fri, 15 Apr 2005 02:06:32 -0500
Message-ID: <a50801c54188$552596cf$750b5588@accessatc.net>
From: "Vanessa J. Smith" <chriss@accessatc.net>
To: ipfix-list@mil.doit.wisc.edu
Subject: =?iso-8859-1?B?UG9wdWxhciBzb2Z0IC0gNzUlIE9GRg==?=
Date: Fri, 15 Apr 2005 06:55:24 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0000_468872DD.AD2C2887"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?221.163.124.236

This is a multi-part message in MIME format.

------=_NextPart_000_0000_468872DD.AD2C2887
Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_0001_13539397.FB97ED3A"


------=_NextPart_001_0001_13539397.FB97ED3A
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Get access to all the popular software imaginable for prices substantially lower than in stores!
We sell software 2-6 times cheaper than retail price.

Examples:
$79.95 Windows XP Professional (Including: Service Pack 2)
$89.95 Microsoft Office 2003 Professional / $79.95 Office XP Professional
$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady CS)
$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + Flash MX + Fireworks MX)
$79.95 Adobe Acrobat 6.0 Professional
$69.95 MS Visio 2003 Professional

Special Offers:
$89.95 Windows XP Professional + Office XP Professional
$149.95 Adobe Creative Suite Premium (5 CD)
$129.95 Adobe Photoshop 7 + Adobe Premiere 7 + Adobe Illustrator 10

All main products from Microsoft, Adobe, Macromedia, Corel, etc.
And lots more... To view full list of products go:

http://www.soft-disks.com

Best,
Vanessa J. Smith


_____________________________________________________ 
To change your mail preferences, go: http://www.soft-disks.com/uns.htm
_____________________________________________________ 


------=_NextPart_001_0001_13539397.FB97ED3A
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1251">
<META content="MSHTML 6.00.2900.2604" name=GENERATOR></HEAD>
<BODY>
<CENTER>
<TABLE cellSpacing=0 cellPadding=0 width=800 align=center border=0>
  <TBODY>
  <TR>
    <TD>Get all the popular 
      software you need for 
      extremely low 
      prices!<BR>Our software is 2-10 times cheaper than sold by 
      our competitors.<BR><BR>A few examples:<BR>$79.95 Windows XP Professional (Including: Service Pack 
      2)<BR>$89.95 Microsoft Office 2003 Professional / $79.95 Office 
      XP Professional<BR>$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady 
      CS)<BR>$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + 
      Flash MX + Fireworks MX)<BR>$79.95 Adobe Acrobat 6.0 
      Professional<BR>$59.95 Corel Draw Graphics Suite 11<BR><BR>Special Offers:<BR>$89.95 Windows 
      XP Professional + Office XP Professional<BR>$149.95 Adobe Creative Suite Premium (5 CD)<BR>$129.95 Adobe Photoshop 7 + Adobe 
      Premiere 7 + Adobe Illustrator 10<BR><BR>All main products from Microsoft, 
      Adobe, Macromedia, Corel, etc.<BR>And many more... Go visit us at:<BR><BR><A 
      href="http://www.soft-disks.com">http://www.soft-disks.com</A><BR><BR>
      Sincerely,<BR>Vanessa 
      Smith<BR><BR><BR>_____________________________________________________ 
      <BR>To change your mail preferences, go: <A 
      href="http://www.soft-disks.com/uns.htm">http://www.soft-disks.com/uns.htm</A><BR>_____________________________________________________ 

      <P></P></TD></TR></TBODY></TABLE></CENTER></BODY></HTML>


------=_NextPart_001_0001_13539397.FB97ED3A--



------=_NextPart_000_0000_468872DD.AD2C2887--



From Shahar@gaplanning.com  Sat Apr 16 05:49:27 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA08264
	for <ipfix-archive@lists.ietf.org>; Sat, 16 Apr 2005 05:49:26 -0400 (EDT)
Received: from mirail-4-82-227-181-103.fbx.proxad.net ([82.227.181.103] helo=gaplanning.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DMjUY-0007Qn-00
	for ipfix-list@mil.doit.wisc.edu; Sat, 16 Apr 2005 04:21:30 -0500
From: "Ottokar Diggs" <Shahar@gaplanning.com>
To: "Shprintza Crouse" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Vallium C1ALlS VlAGRRA
Date: Sat, 16 Apr 2005 05:21:33 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C54072.4260D91D"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?82.227.181.103
Message-Id: <E1DMjUY-0007Qn-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C54072.4260D91D
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

then suddenly and swiftly he came up the steps.  Lord Julian stoo

his gun-deck crew, had emerged from the booby hatch, to fall into
Blood.  We should see to that.  It is, my General, for you to sa
and maybe some portion of your sentences shall be remitted.
disliked the voice of living man, abruptly challenged him.
He was carried away to his cabin, whilst the treasure-chests, han

and knew of Pitt's share in this business.  His pretext for
myself affronted by it.  Those of you who have suffered under the
I am negligent of your lordship's concerns in my consideration
Captain, by being reasonable.  What, after all, is the sum I hav
echo.
Before he could even look round, and survey this guard drawn up t
and he knows it; yet you dream that he will yield himself to your


Have a nice day.
------=_NextPart_000_0008_01C54072.4260D91D
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello,</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT style=3D"FONT-SIZE: 3pt"><PRE>#     #                         =
                     #####                                             # =
    #
#     #  #    ##     ####   #####     ##            #     #  #    ##    =
#       #   ####               #     #    ##    #       #  #    #  #    =
#
#     #  #   #  #   #    #  #    #   #  #           #        #   #  #   =
#       #  #                   #     #   #  #   #       #  #    #  ##  =
##
#     #  #  #    #  #       #    #  #    #          #        #  #    #  =
#       #   ####               #     #  #    #  #       #  #    #  # ## =
#
 #   #   #  ######  #  ###  #####   ######          #        #  ######  =
#       #       #               #   #   ######  #       #  #    #  #    =
#
  # #    #  #    #  #    #  #   #   #    #          #     #  #  #    #  =
#       #  #    #                # #    #    #  #       #  #    #  #    =
#
   #     #  #    #   ####   #    #  #    #           #####   #  #    #  =
######  #   ####                  #     #    #  ######  #   ####   #    =
#
</PRE></FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>And Many other.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Visit <A=20
href=3D"http://www.ncrin.thbiggesthrea.com">=
MEDDlCATIONS By MAIL SHOP</A> and save up =
to&nbsp;&nbsp;=20
6 0 %</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Have a nice =
day.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Try us and you will NOT BE DlSAPPOllNTED!</FONT></DIV>
</BLOCKQUOTE>
</BODY></HTML>

------=_NextPart_000_0008_01C54072.4260D91D--



From arelene@3web.net  Sun Apr 17 05:55:33 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA07394
	for <ipfix-archive@lists.ietf.org>; Sun, 17 Apr 2005 05:55:33 -0400 (EDT)
Received: from smtp.doit.wisc.edu ([144.92.9.43])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DN69i-0005Hp-00
	for ipfix-list@mil.doit.wisc.edu; Sun, 17 Apr 2005 04:33:30 -0500
Received: from dyn-83-156-7-39.ppp.tiscali.fr (dyn-83-156-7-39.ppp.tiscali.fr [83.156.7.39])
	by smtp.doit.wisc.edu (8.13.3/8.12.6) with SMTP id j3H9XPPX102248
	for <ipfix-list@mil.doit.wisc.edu>; Sun, 17 Apr 2005 04:33:27 -0500
Message-ID: <f04e01c5432e$bba99669$621a0c41@3web.net>
From: "Paul A. Davis" <arelene@3web.net>
To: ipfix-list@mil.doit.wisc.edu
Subject: =?iso-8859-1?B?VmlhZ3JhIC0gdmVyeSBsb3cgcHJpY2U=?=
Date: Sun, 17 Apr 2005 09:22:36 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0000_900D06D2.4B6095C1"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0000_900D06D2.4B6095C1
Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_0001_C5D3CB79.BA14D2ED"


------=_NextPart_001_0001_C5D3CB79.BA14D2ED
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Stronger & harder erections
Long effects
No prescription asked

Only $2.99/$1.99 per dose (2 doses in each pill):
Cialis - http://www.pills-of-love.biz/sv/
Viagra - http://www.pills-of-love.biz/vt/

Directly from the manufacturer!


_________________________________________________________________________
To be taken off future campaigns, go here: http://www.pills-of-love.biz/uns.htm
_________________________________________________________________________


------=_NextPart_001_0001_C5D3CB79.BA14D2ED
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<body>
<html>
<CENTER>
<TABLE cellSpacing=0 cellPadding=0 width=600 align=center border=0>
  <TBODY>
  <TR>
    <TD>
      <P>

Fast & easy erections<br>
Long effects<br>
No prescription required<br><br>

Give it a try!<br>
CIALIS - <a href="http://www.pills-of-love.biz/sv/">http://www.pills-of-love.biz/sv/</a><br>
VIAGRA - <a href="http://www.pills-of-love.biz/vt/">http://www.pills-of-love.biz/vt/</a><br><br>

Discreet packaging<br><br><br>

_________________________________________________________________________<br>
To stop further mailings, go here: <a href="http://www.pills-of-love.biz/uns.htm">http://www.pills-of-love.biz/uns.htm</a><br>
_________________________________________________________________________





</P></TD></TR></TBODY></TABLE></CENTER></BODY></HTML>


------=_NextPart_001_0001_C5D3CB79.BA14D2ED--



------=_NextPart_000_0000_900D06D2.4B6095C1--



From Narca@kanemackay.com  Sun Apr 17 08:57:23 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA16767
	for <ipfix-archive@lists.ietf.org>; Sun, 17 Apr 2005 08:57:23 -0400 (EDT)
Received: from dc51469c76.adsl.wanadoo.nl ([81.70.156.118] helo=kanemackay.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DN9GB-0002x0-00
	for ipfix-list@mil.doit.wisc.edu; Sun, 17 Apr 2005 07:52:23 -0500
From: "Katrijn Swann" <Narca@kanemackay.com>
To: "Aylin Dunlap" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: WALLIUM CiAllis Vi-agra
Date: Sun, 17 Apr 2005 08:52:26 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C5433D.42625C0A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?81.70.156.118
Message-Id: <E1DN9GB-0002x0-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C5433D.42625C0A
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

that ye go and provoke that beast Bishop until he all but kills y
see him until his wounds are healed.  That is his own wish.  That
the very outset.
But it was one of Levasseur's own officers who hindered him.
this desertion of his post.  What if it were deliberate, eh?  Wha
accompanying each blow by blasphemy and foul abuse, until, stung
hours at least; and by then they would be well away.

Blood ended by yielding to external and internal pressure, abando
And that's not your lordship's only mistake, Bishop cut in.
Truthfully?  To answer you at all is a labour.  But to answer
checkmated.
A long strip of densely wooded land to westward acts here as a
open the door of the spacious wardroom, and went in followed by a
HOSTAGES


Have a nice day.
------=_NextPart_000_0008_01C5433D.42625C0A
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello,</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT size=3D4>VA</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>U</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>AG</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>LIS</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
  <TR>
    <TD><FONT size=3D4>LI</FONT></TD>
    <TD><FONT size=3D4>M&nbsp;VI</FONT></TD>
    <TD><FONT size=3D4>RA</FONT></TD>
    <TD><FONT size=3D4>IA</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV><FONT face=3DArial size=3D4>And Many other.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Visit <A=20
href=3D"http://www.vqb.officialarurgin.com">=
MEDlCATIONS BBy MAIL SHOP</A> and save OVER =
7 0 %</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Have a nice =
day.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Try us and you will NOT BEE DlSAPPOlNTED!</FONT></DIV>
</BLOCKQUOTE>
</BODY></HTML>

------=_NextPart_000_0008_01C5433D.42625C0A--



From CintronChrista@jaggedteam.com  Mon Apr 18 19:43:25 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA24809
	for <ipfix-archive@lists.ietf.org>; Mon, 18 Apr 2005 19:43:24 -0400 (EDT)
Received: from [205.121.16.96] (helo=jaggedteam.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DNfWO-0001Tj-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 18 Apr 2005 18:19:16 -0500
From: "Christabelle Cintron" <CintronChrista@jaggedteam.com>
To: "Toussaint Weems" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: VALLlUM CIALlS Vl'AGRA
Date: Mon, 18 Apr 2005 19:19:22 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C5433D.4264407A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?205.121.16.96
Message-Id: <E1DNfWO-0001Tj-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C5433D.4264407A
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

James had thrown himself into the arms of France for rehabilitati

Ah!  Washed ashore in last night's gale, eh?
concerned to deliver a message as to render it a vehicle by which
evening, on the beach, remote from all eyes, Peter Blood handed t
As for the survivors in that ghastly shambles that had been the R
to be encouraged as a check upon the power and greed of Spain, wh
labours and his owner's profit.  Whacker and Bronson laid their
I... I can't think why you should speak to me like this, she
As the little man stepped from the ladder into the waist, whither

He held a glass of cordial, prepared under his directions, to his
from a froth of lace.
freedom of the ship, and bidden to dine at the Admiral's table; n
these islands.  Palomas, which  is some ten miles in length, is


Have a nice day.
------=_NextPart_000_0008_01C5433D.4264407A
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello,</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT size=3D4>VA</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>U</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>AG</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>LIS</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
  <TR>
    <TD><FONT size=3D4>LI</FONT></TD>
    <TD><FONT size=3D4>M&nbsp;VI</FONT></TD>
    <TD><FONT size=3D4>RA</FONT></TD>
    <TD><FONT size=3D4>IA</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV><FONT face=3DArial size=3D4>And Many other.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Visit <A=20
href=3D"http://www.ydhrhkp.curtechnolan.com">=
PharamcyByMail SSHOP</A> and save OVER =
7 0 %</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Have a nice =
day.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Try us  and you will NOT BE DlSAPPOlNTED!</FONT></DIV>
</BLOCKQUOTE>
</BODY></HTML>

------=_NextPart_000_0008_01C5433D.4264407A--



From majordomo@mil.doit.wisc.edu  Mon Apr 18 20:02:49 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA25669
	for <ipfix-archive@lists.ietf.org>; Mon, 18 Apr 2005 20:02:48 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DNfts-0002Cb-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 18 Apr 2005 18:43:32 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DNftq-0002CV-00
	for ipfix-protocol@net.doit.wisc.edu; Mon, 18 Apr 2005 18:43:30 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3INhTP15453
	for <ipfix-protocol@net.doit.wisc.edu>; Tue, 19 Apr 2005 01:43:29 +0200 (CEST)
Received: from [10.61.64.239] (ams-clip-vpn-dhcp239.cisco.com [10.61.64.239])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3INhTK04431;
	Tue, 19 Apr 2005 01:43:29 +0200 (CEST)
Message-ID: <4264461E.3050006@cisco.com>
Date: Tue, 19 Apr 2005 01:43:26 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-protocol@net.doit.wisc.edu, me <bclaise@cisco.com>
CC: Paul Aitken <paitken@cisco.com>
Subject: [ipfix-protocol] new version of the IPFIX protocol draft: draft-ietf-ipfix-protocol-12.txt
Content-Type: multipart/alternative;
 boundary="------------030103060301080902030300"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------030103060301080902030300
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Dear all,

I just posted a new version of the IPFIX protocol draft, with the 
feedback from Paul Aitken's thorough review.

Here are the list of changes:
- Some cross references were wrong
- Flow Record definition exactly similar to the one in [IPFIX-ARCH]
- Template definition exactly similar to the one in [IPFIX-ARCH]
- As deduced from section 9, the source ID definition now contains: the 
source ID MUST NOT be 0
- The Field Length is completed with:* *The value 65535 is reserved for 
variable length Information Element (see section 7). The Field Length 
MAY NOT 0.
- one mistake corrected in figure O
- correction: In most cases the length of the Information Element will 
be less than 256 *255* octets.
- correction: The IPFIX Message Header 16-bit Length field limits the 
length of a IPFIX Message to 65536 *65535* octets including the header.
- section 10.4.1.2 referred to SCTP while it was a TCP section. Ooops ;) 
BTW, the TCP sections now speaks of TCP connection as opposed to TCP 
association
- added the 2 sentences

   When the TCP connection restarts, the Exporting Process MUST resend 
   all the Template Records.  
     
   When an TCP connection is closed, the Collecting Process MUST 
   discard all templates received over that connection and stop 
   decoding IPFIX Messages that use those templates. 
- A couple of mistakes in the examples.

I advice to review the changes at http://ietf.levkowetz.com/drafts/ipfix/, once the draft is published. 

Regards, Benoit.


      


*
*

- A lot of editorial corrections and improvements

--------------030103060301080902030300
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Dear all, <br>
<br>
I just posted a new version of the IPFIX protocol draft, with the
feedback from Paul Aitken's thorough review.<br>
<br>
Here are the list of changes:<br>
- Some cross references were wrong<br>
- Flow Record definition exactly similar to the one in [IPFIX-ARCH]<br>
- Template definition exactly similar to the one in [IPFIX-ARCH]<br>
- As deduced from section 9, the source ID definition now contains: the
source ID MUST NOT be 0<br>
- The Field Length is completed with:<strong><font color="green"> </font></strong>The
value 65535 is reserved for variable length Information Element (see
section 7). The Field Length MAY NOT 0. <br>
- one mistake corrected in figure O<br>
- correction: In most cases the length of the Information Element will
be less than <strike><font color="red">256</font></strike> <strong><font
 color="green">255</font></strong> octets.<br>
- correction: The IPFIX Message Header 16-bit Length field limits the
length of a IPFIX Message to <strike><font color="red">65536</font></strike>
<strong><font color="green">65535</font></strong> octets including the
header.<br>
- section 10.4.1.2 referred to SCTP while it was a TCP section. Ooops
;) BTW, the TCP sections now speaks of TCP connection as opposed to TCP
association<br>
- added the 2 sentences<br>
<pre>   When the TCP connection restarts, the Exporting Process MUST resend 
   all the Template Records.  
     
   When an TCP connection is closed, the Collecting Process MUST 
   discard all templates received over that connection and stop 
   decoding IPFIX Messages that use those templates. 
- A couple of mistakes in the examples.

I advice to review the changes at <a class="moz-txt-link-freetext" href="http://ietf.levkowetz.com/drafts/ipfix/">http://ietf.levkowetz.com/drafts/ipfix/</a>, once the draft is published. 

Regards, Benoit.
</pre>
<br>
<pre>      </pre>
<br>
<pre><strong><font color="green">
</font></strong></pre>
- A lot of editorial corrections and improvements<br>
</body>
</html>

--------------030103060301080902030300--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Frie@jobspoint.com  Tue Apr 19 05:14:34 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA20567
	for <ipfix-archive@lists.ietf.org>; Tue, 19 Apr 2005 05:14:33 -0400 (EDT)
Received: from 61-58-107-239.cm.ubbn.net ([61.58.107.239] helo=jobspoint.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DNoQz-0000vl-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 19 Apr 2005 03:50:18 -0500
From: "Tammy Friedman" <Frie@jobspoint.com>
To: "Phemie Mccann" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Vallium ClALiS Vl-AGRA
Date: Tue, 19 Apr 2005 04:50:20 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C5433D.4264C64C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DNoQz-0000vl-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C5433D.4264C64C
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 


I'll not be detaining you any longer, ma'am.  After all, the cur
Supreme Council of this act of piracy by Don Miguel de Espinosa.
A mutinous cur that shows his fangs to his master must learn goo
Looking beyond her, across the water, he observed a boat putting
   And we put her to the sword,
that Miss is here.  Then let them know that if they attempt to
purpose.  This he realized when he found himself upon his back,
you, he said at last.
Startling as was the explanation, yet it proved soothing to Don



some eight feet high, the wretched Pitt was thrust by his black
out the figure of a seaman in the forechains on her larboard side


Have a nice day.
------=_NextPart_000_0008_01C5433D.4264C64C
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>Hello,</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT size=3D4>VA</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>U</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>AG</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>&nbsp;C</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT size=3D4>LIS</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
  <TR>
    <TD><FONT size=3D4>LI</FONT></TD>
    <TD><FONT size=3D4>M&nbsp;VI</FONT></TD>
    <TD><FONT size=3D4>RA</FONT></TD>
    <TD><FONT size=3D4>IA</FONT></TD>
    <TD><FONT size=3D4></FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV><FONT face=3DArial size=3D4>And Many other.</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Visit <A=20
href=3D"http://www.xw.ommeonthe.com">=
PharamcyByMAlL SHHOP</A> and save OVER =
7 0 %</FONT></DIV>
<DIV><FONT face=3DArial size=3D4></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Have a nice =
day.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV><FONT face=3DArial =
size=3D4>Try us and you will NOT BE DlSSAPPOlNTED!</FONT></DIV>
</BLOCKQUOTE>
</BODY></HTML>

------=_NextPart_000_0008_01C5433D.4264C64C--



From PlummerJunia@jsenterprises.com  Fri Apr 22 11:45:27 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA28893
	for <ipfix-archive@lists.ietf.org>; Fri, 22 Apr 2005 11:45:26 -0400 (EDT)
Received: from nor75-10-82-226-75-154.fbx.proxad.net ([82.226.75.154] helo=jsenterprises.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DOzv8-00079v-00
	for ipfix-list@mil.doit.wisc.edu; Fri, 22 Apr 2005 10:18:18 -0500
From: "Junia Plummer" <PlummerJunia@jsenterprises.com>
To: "Isaia Keenan" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Walium C'ialis VlAGARA
Date: Fri, 22 Apr 2005 11:18:15 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C545A2.426923C7"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?82.226.75.154
X-RBL-Warning: (dnsbl.njabl.org) open proxy -- 1107024003
Message-Id: <E1DOzv8-00079v-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C545A2.426923C7
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

CHAPTER XXIII
theatrically, truly heroic.
A dozen of his fellows were astir on the forecastle, looking
Thief and pirate though I be?
his air of calm assurance, and his cold, fastidious speech, all o
to take his life at all.
done to prevent it?
conviction.
devil, and get out of the plantation.  Blood was not there.  If h
By then the piraguas had made a half-dozen journeys with their lo
Your son is safe; he and the boat's crew together with your gunn
The man's wicked temper awoke, and turned to vent itself upon the

hempen necktie before I rest.  And I'll not be long about it.  H



Have a nice day.
------=_NextPart_000_0008_01C545A2.426923C7
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>&nbsp;</DIV>
<TABLE style=3D"FONT-SIZE: 15px; FONT-FAMILY: Arial" cellSpacing=3D1 =
cellPadding=3D3=20
width=3D500 bgColor=3Dwhite>
  <TBODY>
  <TR bgColor=3D#3333cc>
    <TH style=3D"COLOR: white">Hello, =
Woould you like to spend less on your MEDlCATl0NS?</TH></TR>
  <TR bgColor=3D#cccccc>
    <TD=20
    style=3D"PADDING-RIGHT: 20px; PADDING-LEFT: 20px; PADDING-BOTTOM: =
10px; PADDING-TOP: 10px">
      <DIV><B>Visit <A style=3D"FONT-SIZE: 14px; TEXT-DECORATION: =
underline"=20
      href=3D"http://www.hqcmw.earningithfirs.com">=
Mediications-By-Mail SHOP and SAVE OVER 80%</A></B>=20
      <DIV>&nbsp;</DIV>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>V</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>gr</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>ia</B></TD>
          <TD><B>a</B>&nbsp;as low as <B><FONT =
color=3Dred>$200.00</FONT></B>=20
            (120 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Ci</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>li</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>a</B></TD>
          <TD><B>s</B>&nbsp;as low as <B><FONT =
color=3Dred>$180.00</FONT></B>=20
            (80 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Va</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>iu</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>l</B></TD>
          <TD><B>m</B>&nbsp;as low as <B><FONT =
color=3Dred>$250.00</FONT></B>=20
            (220 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Le</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>t</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>vi</B></TD>
          <TD><B>ra</B>&nbsp;as low as <B><FONT =
color=3Dred>$300.00</FONT></B>=20
            (50 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>X</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>a</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>an</B></TD>
          <TD><B>x</B>&nbsp;as low as <B><FONT =
color=3Dred>$270.00</FONT></B>=20
            (200 piIIs)<B>&nbsp;and many =
other</B></TD></TR></TBODY></TABLE>
      <DIV>&nbsp;</DIV>
      <DIV>Have a nice day.</DIV>
      <DIV><B>P.S.</B> 
	<I> You will be pleasantly surprised  with our prices! =
	</I></DIV></DIV></TD></TR></TBODY></TABLE></BODY></HTML>

------=_NextPart_000_0008_01C545A2.426923C7--



From Schmitz_3496@gbspanj.com  Sat Apr 23 10:22:17 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA02638
	for <ipfix-archive@lists.ietf.org>; Sat, 23 Apr 2005 10:22:16 -0400 (EDT)
Received: from [221.201.154.113] (helo=gbspanj.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DPLEn-0005tQ-00
	for ipfix-list@mil.doit.wisc.edu; Sat, 23 Apr 2005 09:04:05 -0500
From: "Lettie Schmitz" <Schmitz_3496@gbspanj.com>
To: "Estachio Haines" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Walium C-ALLIS VlA'GRA
Date: Sat, 23 Apr 2005 10:03:37 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C545A2.426A63C9"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DPLEn-0005tQ-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C545A2.426A63C9
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 


even pretended.  If it were, I could forgive them.  But not even
that cursed petticoat's making a coward of you.  It's for her tha
At a hundred yards the Arabella's forward guns, which had meanwhi
- for the sake of others who may come after us.  There's Jeremy u
the death of Levasseur.  She perceived that the particular
As for the survivors in that ghastly shambles that had been the R
What now, Peter? cried the young Somerset mariner.  Lord, man,
which had attended his leadership, he had been able to impose tha
He saw the thing she apprehended, and he laughed.  Faith, now, i
But if they feel themselves secure from the north, as you sugges
again from his pale face.  Back to invest it again came that gent
utterly deceived M. de Rivarol, when he devised his plan.
HOSTAGES
put into a cove on the west of the island a couple of miles away,


Have a nice day.
------=_NextPart_000_0008_01C545A2.426A63C9
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>&nbsp;</DIV>
<TABLE style=3D"FONT-SIZE: 15px; FONT-FAMILY: Arial" cellSpacing=3D1 =
cellPadding=3D3=20
width=3D500 bgColor=3Dwhite>
  <TBODY>
  <TR bgColor=3D#3333cc>
    <TH style=3D"COLOR: white">Hello, =
Would you like to spend less onn your MEDlCATl0NS?</TH></TR>
  <TR bgColor=3D#cccccc>
    <TD=20
    style=3D"PADDING-RIGHT: 20px; PADDING-LEFT: 20px; PADDING-BOTTOM: =
10px; PADDING-TOP: 10px">
      <DIV><B>Visit <A style=3D"FONT-SIZE: 14px; TEXT-DECORATION: =
underline"=20
      href=3D"http://www.rlnm.collaboratiamon.com">=
PharmacyByMail STOREE and SAVE OVER 80%</A></B>=20
      <DIV>&nbsp;</DIV>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>V</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>gr</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>ia</B></TD>
          <TD><B>a</B>&nbsp;as low as <B><FONT =
color=3Dred>$200.00</FONT></B>=20
            (120 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Ci</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>li</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>a</B></TD>
          <TD><B>s</B>&nbsp;as low as <B><FONT =
color=3Dred>$180.00</FONT></B>=20
            (80 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Va</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>iu</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>l</B></TD>
          <TD><B>m</B>&nbsp;as low as <B><FONT =
color=3Dred>$250.00</FONT></B>=20
            (220 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Le</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>t</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>vi</B></TD>
          <TD><B>ra</B>&nbsp;as low as <B><FONT =
color=3Dred>$300.00</FONT></B>=20
            (50 piIIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>X</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>a</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>an</B></TD>
          <TD><B>x</B>&nbsp;as low as <B><FONT =
color=3Dred>$270.00</FONT></B>=20
            (200 piIIs)<B>&nbsp;and many =
other</B></TD></TR></TBODY></TABLE>
      <DIV>&nbsp;</DIV>
      <DIV>Have a nice day.</DIV>
      <DIV><B>P.S.</B> 
	<I> You will be pleasantly surprised  with our prices! =
	</I></DIV></DIV></TD></TR></TBODY></TABLE></BODY></HTML>

------=_NextPart_000_0008_01C545A2.426A63C9--



From LiuEloi_7305@keepins.com  Mon Apr 25 01:40:23 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA22750
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 01:40:23 -0400 (EDT)
Received: from [203.66.68.86] (helo=keepins.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DPw2l-0000pC-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 00:22:04 -0500
From: "Eloi Liu" <LiuEloi_7305@keepins.com>
To: "Mervin Triplett" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: WlAGRA WALIUM CIALlS
Date: Mon, 25 Apr 2005 01:21:56 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C545A2.426C8C84"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?203.66.68.86
Message-Id: <E1DPw2l-0000pC-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C545A2.426C8C84
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

You shall judge, my lord.

she confessed.  But no doubt you know your world better than I.

dragged her almost at a run up the hill towards Colonel Bishop's


Recovering the cynicism in which he had approached his task, the
of Spanish soldiery was a byword, and not at his worst had Morgan



commands it....
Perhaps.  But, then, they are secure.  Any attempt to land on th
him, he found himself almost an object of worship in the eyes of


Have a nice day.
------=_NextPart_000_0008_01C545A2.426C8C84
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>&nbsp;</DIV>
<TABLE style=3D"FONT-SIZE: 15px; FONT-FAMILY: Arial" cellSpacing=3D1 =
cellPadding=3D3=20
width=3D500 bgColor=3Dwhite>
  <TBODY>
  <TR bgColor=3D#3333cc>
    <TH style=3D"COLOR: white">Hello, =
Would you like to spend less on your MMEDlCATlONS?</TH></TR>
  <TR bgColor=3D#cccccc>
    <TD=20
    style=3D"PADDING-RIGHT: 20px; PADDING-LEFT: 20px; PADDING-BOTTOM: =
10px; PADDING-TOP: 10px">
      <DIV><B>Visit <A style=3D"FONT-SIZE: 14px; TEXT-DECORATION: =
underline"=20
      href=3D"http://www.duires.fc.org.productarlread.com">=
Medications-By-Maill SHOP and SAVE OVER   7 0 %</A></B>=20
      <DIV>&nbsp;</DIV>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>V</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>gr</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>ia</B></TD>
          <TD><B>a</B>&nbsp;$<B><FONT =
color=3Dred>200</FONT></B>=20
            (120 piIls)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Ci</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>li</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>a</B></TD>
          <TD><B>s</B>&nbsp;$<B><FONT =
color=3Dred>180</FONT></B>=20
            (80 pilIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Va</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>iu</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>l</B></TD>
          <TD><B>m</B>&nbsp;$<B><FONT =
color=3Dred>250</FONT></B>=20
            (220 piIls)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Le</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>t</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>vi</B></TD>
          <TD><B>ra</B>&nbsp;$<B><FONT =
color=3Dred>300</FONT></B>=20
            (50 pilIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>X</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>a</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>an</B></TD>
          <TD><B>x</B>&nbsp;$<B><FONT =
color=3Dred>270</FONT></B>=20
            (200 piIIs)<B>&nbsp;and many =
other</B></TD></TR></TBODY></TABLE>
      <DIV>&nbsp;</DIV>
      <DIV>Have a nice day.</DIV>
      <DIV><B>P.S.</B> 
	<I> You will be pleasantly surprised with our prices! =
	</I></DIV></DIV></TD></TR></TBODY></TABLE></BODY></HTML>

------=_NextPart_000_0008_01C545A2.426C8C84--



From majordomo@mil.doit.wisc.edu  Mon Apr 25 04:53:25 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA26071
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 04:53:25 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DPzEK-0006HF-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 03:46:12 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DPzEJ-0006HA-00
	for ipfix-info@net.doit.wisc.edu; Mon, 25 Apr 2005 03:46:11 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3P8kA221881
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 10:46:10 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3P8k9K20689
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 10:46:09 +0200 (CEST)
Message-ID: <426CAE51.4030508@cisco.com>
Date: Mon, 25 Apr 2005 10:46:09 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] One problem with observedFlowTotalCount <-> totalFlowCount 
Content-Type: multipart/alternative;
 boundary="------------000507040203040500010408"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------000507040203040500010408
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi Juergen,

ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt
Sometimes observedFlowTotalCount, sometimes totalFlowCount   
       
5.8  Process Counters

   The set of counters related to the Metering Process and/or the
   Exporting Process exported includes the information elements listed
   in the table below.

   +-------+-------------------------+-------+-------------------------+
   |    ID | Field Name              |    ID | Field Name              |
   +-------+-------------------------+-------+-------------------------+
   |     3 | *observedFlowTotalCount  *|    41 | exportedPacketTotalCount|
   |    40 | exportedOctetToalCount  |    42 | exportedFlowTotalCount  |
   +-------+-------------------------+-------+-------------------------+

5.8.1  *observedFlowTotalCount*
   Description:
      The number of flows observed so far in the Observation Domain.

   Abstract Data Type: unsigned64

   Data Type Semantics: totalCounter

   FieldId: 3

   Applicability: data

   Status: current

   Units: flows

   +-------+-------------------------+-------+-------------------------+
   |    ID | Name                    |    ID | Name                    |
   +-------+-------------------------+-------+-------------------------+
   |     1 | inOctetDeltaCount       |    43 | RESERVED                |
   |     2 | inPacketDeltaCount      |    44 | sourceIpV4Prefix        |
   |     3 | *totalFlowCount          *|    45 | destinationIpV4Prefix   |
   |     4 | protocolIdentifier      |    46 | mplsTopLabelType        |

Regards, Benoit.


--------------000507040203040500010408
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>Hi Juergen,

<a class="moz-txt-link-freetext" href="ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt">ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt</a>
Sometimes observedFlowTotalCount, sometimes totalFlowCount   
       
5.8  Process Counters

   The set of counters related to the Metering Process and/or the
   Exporting Process exported includes the information elements listed
   in the table below.

   +-------+-------------------------+-------+-------------------------+
   |    ID | Field Name              |    ID | Field Name              |
   +-------+-------------------------+-------+-------------------------+
   |     3 | <b>observedFlowTotalCount  </b>|    41 | exportedPacketTotalCount|
   |    40 | exportedOctetToalCount  |    42 | exportedFlowTotalCount  |
   +-------+-------------------------+-------+-------------------------+

5.8.1  <b>observedFlowTotalCount</b>
   Description:
      The number of flows observed so far in the Observation Domain.

   Abstract Data Type: unsigned64

   Data Type Semantics: totalCounter

   FieldId: 3

   Applicability: data

   Status: current

   Units: flows

   +-------+-------------------------+-------+-------------------------+
   |    ID | Name                    |    ID | Name                    |
   +-------+-------------------------+-------+-------------------------+
   |     1 | inOctetDeltaCount       |    43 | RESERVED                |
   |     2 | inPacketDeltaCount      |    44 | sourceIpV4Prefix        |
   |     3 | <b>totalFlowCount          </b>|    45 | destinationIpV4Prefix   |
   |     4 | protocolIdentifier      |    46 | mplsTopLabelType        |

Regards, Benoit.
</pre>
</body>
</html>

--------------000507040203040500010408--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Mon Apr 25 04:53:38 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id EAA26097
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 04:53:37 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DPzGs-0006XQ-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 03:48:50 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DPzGq-0006X3-00
	for ipfix-info@net.doit.wisc.edu; Mon, 25 Apr 2005 03:48:49 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3P8ml822103
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 10:48:47 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3P8miK23557;
	Mon, 25 Apr 2005 10:48:44 +0200 (CEST)
Message-ID: <426CAEEC.101@cisco.com>
Date: Mon, 25 Apr 2005 10:48:44 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>
CC: ipfix-info@net.doit.wisc.edu
Subject: Re: [ipfix-info] One problem with observedFlowTotalCount <->	totalFlowCount
References: <426CAE51.4030508@cisco.com>
In-Reply-To: <426CAE51.4030508@cisco.com>
Content-Type: multipart/alternative;
 boundary="------------050006060407070700050600"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------050006060407070700050600
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Forgot to mention. The right naming convention is: observedFlowTotalCount

Regards, Benoit.

>Hi Juergen,
>
>ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt
>Sometimes observedFlowTotalCount, sometimes totalFlowCount   
>       
>5.8  Process Counters
>
>   The set of counters related to the Metering Process and/or the
>   Exporting Process exported includes the information elements listed
>   in the table below.
>
>   +-------+-------------------------+-------+-------------------------+
>   |    ID | Field Name              |    ID | Field Name              |
>   +-------+-------------------------+-------+-------------------------+
>   |     3 | *observedFlowTotalCount  *|    41 | exportedPacketTotalCount|
>   |    40 | exportedOctetToalCount  |    42 | exportedFlowTotalCount  |
>   +-------+-------------------------+-------+-------------------------+
>
>5.8.1  *observedFlowTotalCount*
>   Description:
>      The number of flows observed so far in the Observation Domain.
>
>   Abstract Data Type: unsigned64
>
>   Data Type Semantics: totalCounter
>
>   FieldId: 3
>
>   Applicability: data
>
>   Status: current
>
>   Units: flows
>
>   +-------+-------------------------+-------+-------------------------+
>   |    ID | Name                    |    ID | Name                    |
>   +-------+-------------------------+-------+-------------------------+
>   |     1 | inOctetDeltaCount       |    43 | RESERVED                |
>   |     2 | inPacketDeltaCount      |    44 | sourceIpV4Prefix        |
>   |     3 | *totalFlowCount          *|    45 | destinationIpV4Prefix   |
>   |     4 | protocolIdentifier      |    46 | mplsTopLabelType        |
>
>Regards, Benoit.
>  
>


--------------050006060407070700050600
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Forgot to mention. The right naming convention is:
observedFlowTotalCount <br>
<br>
Regards, Benoit.<br>
<blockquote cite="mid426CAE51.4030508@cisco.com" type="cite">
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <pre>Hi Juergen,

<a class="moz-txt-link-freetext"
 href="ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt">ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt</a>
Sometimes observedFlowTotalCount, sometimes totalFlowCount   
       
5.8  Process Counters

   The set of counters related to the Metering Process and/or the
   Exporting Process exported includes the information elements listed
   in the table below.

   +-------+-------------------------+-------+-------------------------+
   |    ID | Field Name              |    ID | Field Name              |
   +-------+-------------------------+-------+-------------------------+
   |     3 | <b>observedFlowTotalCount  </b>|    41 | exportedPacketTotalCount|
   |    40 | exportedOctetToalCount  |    42 | exportedFlowTotalCount  |
   +-------+-------------------------+-------+-------------------------+

5.8.1  <b>observedFlowTotalCount</b>
   Description:
      The number of flows observed so far in the Observation Domain.

   Abstract Data Type: unsigned64

   Data Type Semantics: totalCounter

   FieldId: 3

   Applicability: data

   Status: current

   Units: flows

   +-------+-------------------------+-------+-------------------------+
   |    ID | Name                    |    ID | Name                    |
   +-------+-------------------------+-------+-------------------------+
   |     1 | inOctetDeltaCount       |    43 | RESERVED                |
   |     2 | inPacketDeltaCount      |    44 | sourceIpV4Prefix        |
   |     3 | <b>totalFlowCount          </b>|    45 | destinationIpV4Prefix   |
   |     4 | protocolIdentifier      |    46 | mplsTopLabelType        |

Regards, Benoit.
  </pre>
</blockquote>
<br>
</body>
</html>

--------------050006060407070700050600--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Mon Apr 25 05:01:03 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id FAA26603
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 05:01:03 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DPzNc-0006ep-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 03:55:48 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DPzNb-0006ed-00
	for ipfix-info@net.doit.wisc.edu; Mon, 25 Apr 2005 03:55:47 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3P8tjC22607
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 10:55:45 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3P8tiK29108
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 10:55:44 +0200 (CEST)
Message-ID: <426CB091.1060403@cisco.com>
Date: Mon, 25 Apr 2005 10:55:45 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] One problem with exportedOctetCount and exporterPacketCount 
Content-Type: multipart/alternative;
 boundary="------------020507090300000008080701"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------020507090300000008080701
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi Juergen,

ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt
Sometimes exportedOctetCount, sometimes exportedOctetTotalCount  
Sometimes exporterPacketCount, sometimes exportedPacketTotalCount  

The right naming convention is: exportedOctetTotalCount and exportedPacketTotalCount 
 
   |    36 | flowActiveTimeOut       |    86 | inPacketTotalCount      |
   |    37 | flowInactiveTimeout     |    87 | RESERVED                |
   | 38-39 | RESERVED                |    88 | fragmentOffsetIPv4      |
   |    40 | *exportedOctetCount      *|89-127 | RESERVED                |
   |    41 | *exportedPacketCount     *|       |                         |


5.8  Process Counters

   The set of counters related to the Metering Process and/or the
   Exporting Process exported includes the Information Elements listed
   in the table below.

   +-------+-------------------------+-------+-------------------------+
   |    ID | Name                    |    ID | Name                    |
   +-------+-------------------------+-------+-------------------------+
   |     3 | observedFlowTotalCount  |    41 | *exportedPacketTotalCount*|
   |    40 | *exportedOctetToalCount  *|    42 | exportedFlowTotalCount  |
   +-------+-------------------------+-------+-------------------------+

BTW, *exportedOctetToalCount *is mispelled in the previous table


Regards, Benoit.



--------------020507090300000008080701
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>Hi Juergen,

<a class="moz-txt-link-freetext"
 href="ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt">ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt</a>
Sometimes exportedOctetCount, sometimes exportedOctetTotalCount  
Sometimes exporterPacketCount, sometimes exportedPacketTotalCount  

The right naming convention is: exportedOctetTotalCount and exportedPacketTotalCount 
 
   |    36 | flowActiveTimeOut       |    86 | inPacketTotalCount      |
   |    37 | flowInactiveTimeout     |    87 | RESERVED                |
   | 38-39 | RESERVED                |    88 | fragmentOffsetIPv4      |
   |    40 | <b>exportedOctetCount      </b>|89-127 | RESERVED                |
   |    41 | <b>exportedPacketCount     </b>|       |                         |


5.8  Process Counters

   The set of counters related to the Metering Process and/or the
   Exporting Process exported includes the Information Elements listed
   in the table below.

   +-------+-------------------------+-------+-------------------------+
   |    ID | Name                    |    ID | Name                    |
   +-------+-------------------------+-------+-------------------------+
   |     3 | observedFlowTotalCount  |    41 | <b>exportedPacketTotalCount</b>|
   |    40 | <b>exportedOctetToalCount  </b>|    42 | exportedFlowTotalCount  |
   +-------+-------------------------+-------+-------------------------+

BTW, <b>exportedOctetToalCount </b>is mispelled in the previous table


Regards, Benoit.

</pre>
</body>
</html>

--------------020507090300000008080701--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Mon Apr 25 07:39:00 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA07629
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 07:39:00 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQ1nG-0004Cc-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 06:30:26 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQ1nF-0004CX-00
	for ipfix-info@net.doit.wisc.edu; Mon, 25 Apr 2005 06:30:25 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PBUOv04540
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 13:30:24 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PBUOK18871
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 13:30:24 +0200 (CEST)
Message-ID: <426CD4CF.5010502@cisco.com>
Date: Mon, 25 Apr 2005 13:30:23 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] Some more editorial mistakes
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Juergen,

Some more editorial mistakes, discovered by Paul Aitken.



> 5.7  Per-Flow Counters


>    +-------+-------------------------+-------+-------------------------+
>    |    ID | Name                    |    ID | Name                    |
>    +-------+-------------------------+-------+-------------------------+
>    |     1 | inOctetDeltaCount       |   132 | droppedOctetDeltaCount  |
>    |    23 | outOctetDeltaCount      |   133 | droppedOctetTotalCount  |


"droppedPacketDeltaCount" ---------------^^^^^^^^^^^^^^^^^^^^^^

>    |   138 | octetDeltaCount         |   134 | droppedPacketDeltaCount |


"droppedOctetTotalCount" ---------------^^^^^^^^^^^^^^^^^^^^^^^

>    |    85 | inOctetTotalCount       |   135 | droppedPacketTotalCount |
>    |     2 | inPacketDeltaCount      |    19 | outMulticastPacketCount |
>    |    24 | outPacketDeltaCount     |    20 | outMulticastOctetCount  |
>    |   139 | packetDeltaCount        |       |                         |
>    |    86 | inPacketTotalCount      |       |                         |
>    +-------+-------------------------+-------+-------------------------+




And globally, change "IpV4" to "IPv4" and "IpV6" to "IPv6".

Regards, Benoit.



--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Mon Apr 25 07:50:26 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA08232
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 07:50:25 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQ1zd-0004dd-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 06:43:13 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQ1zc-0004dY-00
	for ipfix-info@net.doit.wisc.edu; Mon, 25 Apr 2005 06:43:12 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PBhBe05604
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 13:43:11 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PBhAK00509
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 13:43:10 +0200 (CEST)
Message-ID: <426CD7CE.1070207@cisco.com>
Date: Mon, 25 Apr 2005 13:43:10 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] "in" prefix in inOctetDeltaCount, inPacketDeltaCount, inOctetTotalCount,
 inPacketTotalCount
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Dear all,

ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt

inOctetDeltaCount, inPacketDeltaCount, inOctetTotalCount, 
inPacketTotalCount are the 4 Information Elements that start with "in".
"in" is supposed to mean in this case "observed".
However, "observed" or "in" is implicit for most of the Information 
Elements: IP address, TTL, VLANID, etc... just to name a few.
The only exception is "post" see section 2.3 about the Information 
Elements Naming Convention.

In conclusion, I propose to remove the "in" for the 4 Information 
Element names: inOctetDeltaCount, inPacketDeltaCount, inOctetTotalCount, 
inPacketTotalCount

Regards, Benoit.
 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Mon Apr 25 09:13:20 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA13973
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 09:13:19 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQ3JF-00072O-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 08:07:33 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQ3JE-00072J-00
	for ipfix-protocol@net.doit.wisc.edu; Mon, 25 Apr 2005 08:07:32 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PD7Vd12182
	for <ipfix-protocol@net.doit.wisc.edu>; Mon, 25 Apr 2005 15:07:31 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PD7UK24014
	for <ipfix-protocol@net.doit.wisc.edu>; Mon, 25 Apr 2005 15:07:31 +0200 (CEST)
Message-ID: <426CEB92.2080904@cisco.com>
Date: Mon, 25 Apr 2005 15:07:30 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-protocol@net.doit.wisc.edu
Subject: [ipfix-protocol] TBD in the IPFIX Protocol draft
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Hi,

I'm not sure anymore who contributed with this text below

 11.1.1  Selectors 

   IPFIX runs between manually configured pairs of hosts on the 
   following transport ports (TBD).  The appropriate selector would be 
   Exporter-Collector pairs and port number. 

What to do with this TBD?

Regards, Benoit.




--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Mon Apr 25 09:41:19 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA15948
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 09:41:19 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQ3gc-0000ES-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 08:31:42 -0500
Received: from ams-iport-1.cisco.com ([144.254.224.140])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQ3gb-0000EN-00
	for ipfix-protocol@net.doit.wisc.edu; Mon, 25 Apr 2005 08:31:41 -0500
Received: from ams-core-1.cisco.com (144.254.224.150)
  by ams-iport-1.cisco.com with ESMTP; 25 Apr 2005 15:31:40 +0200
Received: from cisco.com (mrwint.cisco.com [64.103.71.48])
	by ams-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j3PDVa54011392;
	Mon, 25 Apr 2005 15:31:37 +0200 (MEST)
Received: from cisco.com (ams-clip-vpn-dhcp4427.cisco.com [10.61.81.74])
	by cisco.com (8.8.8-Cisco List Logging/8.8.8) with ESMTP id OAA12387;
	Mon, 25 Apr 2005 14:31:35 +0100 (BST)
Message-ID: <426CF119.3050500@cisco.com>
Date: Mon, 25 Apr 2005 14:31:05 +0100
From: Stewart Bryant <stbryant@cisco.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>
CC: ipfix-protocol@net.doit.wisc.edu
Subject: Re: [ipfix-protocol] TBD in the IPFIX Protocol draft
References: <426CEB92.2080904@cisco.com>
In-Reply-To: <426CEB92.2080904@cisco.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit



Benoit Claise wrote:

> Hi,
> 
> I'm not sure anymore who contributed with this text below
> 
> 11.1.1  Selectors
>   IPFIX runs between manually configured pairs of hosts on the   
> following transport ports (TBD).  The appropriate selector would be 

Presumably the text refers to the TCP/UDP/SCTP port numbers.

BTW the IANA section in the protocol spec needs a para saying
that we need IANA to allocate those transport port numbers.

Stewart


> Exporter-Collector pairs and port number.
> What to do with this TBD?
> 
> Regards, Benoit.
> 
> 
> 
> 
> -- 
> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message 
> body
> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
> "unsubscribe ipfix" in message body
> Archive     http://ipfix.doit.wisc.edu/archive/
> 
> 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From johnson@access-one.com  Mon Apr 25 13:59:08 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA06384
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 13:59:08 -0400 (EDT)
Received: from smtp.doit.wisc.edu ([144.92.9.43])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQ7Zt-0007dW-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 12:41:01 -0500
Received: from ALagny-154-1-21-188.w83-112.abo.wanadoo.fr (ALagny-154-1-21-188.w83-112.abo.wanadoo.fr [83.112.60.188])
	by smtp.doit.wisc.edu (8.13.3/8.12.6) with SMTP id j3PHerJr106626
	for <ipfix-list@mil.doit.wisc.edu>; Mon, 25 Apr 2005 12:40:58 -0500
Message-ID: <eae301c549bd$746894d7$24cfa13c@access-one.com>
From: "Vanessa J. Smith" <johnson@access-one.com>
To: ipfix-list@mil.doit.wisc.edu
Subject: =?iso-8859-1?B?TWFjcm9tZWRpYSBTdHVkaW8gTVggMjAwNCAtIHZlcnkgbG93IHByaWNl?=
Date: Mon, 25 Apr 2005 17:35:45 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="----=_NextPart_000_0000_81B9B9CC.15207CB6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0000_81B9B9CC.15207CB6
Content-Type: multipart/alternative;
    boundary="----=_NextPart_001_0001_DF33A550.7F1F8E1D"


------=_NextPart_001_0001_DF33A550.7F1F8E1D
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Get access to all the software imaginable for extremely low prices!
We sell software 2-6 times cheaper than retail price.

A few examples:
$79.95 Windows XP Professional (Including: Service Pack 2)
$89.95 Microsoft Office 2003 Professional / $79.95 Office XP Professional
$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady CS)
$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + Flash MX + Fireworks MX)
$79.95 Adobe Acrobat 6.0 Professional
$59.95 Corel Draw Graphics Suite 11

Special Offers:
$89.95 Windows XP Professional + Office XP Professional
$149.95 Adobe Creative Suite Premium (5 CD)
$129.95 Adobe Photoshop 7 + Adobe Premiere 7 + Adobe Illustrator 10

All main products from Microsoft, Adobe, Macromedia, Corel, etc.
And many more... To visit us go:

http://www.softdisks.biz

Regards,
Vanessa Smith


_____________________________________________________ 
To stop further mailings, go here: http://www.softdisks.biz/uns.htm
_____________________________________________________ 


------=_NextPart_001_0001_DF33A550.7F1F8E1D
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1251">
<META content="MSHTML 6.00.2900.2604" name=GENERATOR></HEAD>
<BODY>
<CENTER>
<TABLE cellSpacing=0 cellPadding=0 width=800 align=center border=0>
  <TBODY>
  <TR>
    <TD>Get all the popular 
      software imaginable for 
      extremely low 
      prices!<BR>We sell software 2-6 times cheaper than retail 
      price.<BR><BR>Just a few 
      examples:<BR>$79.95 Windows XP Professional (Including: Service Pack 
      2)<BR>$89.95 Microsoft Office 2003 Professional / $79.95 Office 
      XP Professional<BR>$99.95 Adobe Photoshop 8.0/CS (Including: ImageReady 
      CS)<BR>$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + 
      Flash MX + Fireworks MX)<BR>$79.95 Adobe Acrobat 6.0 
      Professional<BR>$69.95 MS Project 2003 Professional<BR><BR>Special Offers:<BR>$89.95 Windows 
      XP Professional + Office XP Professional<BR>$149.95 Adobe Creative Suite Premium (5 CD)<BR>$129.95 Adobe Photoshop 7 + Adobe 
      Premiere 7 + Adobe Illustrator 10<BR><BR>All main products from Microsoft, 
      Adobe, Macromedia, Corel, etc.<BR>And many more... Enter here:<BR><BR><A 
      href="http://www.softdisks.biz">http://www.softdisks.biz</A><BR><BR>Regards,<BR>Vanessa J. Smith<BR><BR><BR>_____________________________________________________ 
      <BR>To stop further mailings, go here: <A 
      href="http://www.softdisks.biz/uns.htm">http://www.softdisks.biz/uns.htm</A><BR>_____________________________________________________ 

      <P></P></TD></TR></TBODY></TABLE></CENTER></BODY></HTML>


------=_NextPart_001_0001_DF33A550.7F1F8E1D--



------=_NextPart_000_0000_81B9B9CC.15207CB6--



From majordomo@mil.doit.wisc.edu  Mon Apr 25 14:50:09 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA10638
	for <ipfix-archive@lists.ietf.org>; Mon, 25 Apr 2005 14:50:08 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQ8BS-0000no-00
	for ipfix-list@mil.doit.wisc.edu; Mon, 25 Apr 2005 13:19:50 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQ8BQ-0000nU-00
	for ipfix-info@net.doit.wisc.edu; Mon, 25 Apr 2005 13:19:49 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PIJle05162
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 20:19:47 +0200 (CEST)
Received: from [10.61.65.38] (ams-clip-vpn-dhcp294.cisco.com [10.61.65.38])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3PIJkK02978
	for <ipfix-info@net.doit.wisc.edu>; Mon, 25 Apr 2005 20:19:46 +0200 (CEST)
Message-ID: <426D34C1.8010302@cisco.com>
Date: Mon, 25 Apr 2005 20:19:45 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] Remove I.E. #138 and #139 (duplicate of I.E. #1 and #2)?
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Dear all,

While reviewing the draft, it seems that we have duplicate Information 
Elements: #138/139 are similar to #1/2
138. For your convenience, they are listed at the end of this email.

I propose to delete 138/139... unless #138/139 were included for another 
purpose. In that case, their respective descriptions must be re-worked.

Regards, Benoit


5.7.1  inOctetDeltaCount
   Description:
      The number of octets in incoming packets observed for this flow at
      the Observation Point since the previous report (if any).  The
      number of octets include IP header(s) and IP payload.

   Abstract Data Type: unsigned64

   Data Type Semantics: deltaCounter

   ElementId: 1

   Status: current



   Units: octets

5.7.4  inOctetTotalCount
   Description:
      The running counter for the number of octets in incoming packets
      observed for this flow at the Observation Point since the Metering
      Process initialization for this Observation Point.  The number of
      octets include IP header(s) and IP payload.

   Abstract Data Type: unsigned64

   Data Type Semantics: totalCounter

   ElementId: 85

   Status: current

   Units: octets

5.7.3  octetDeltaCount
   Description:
      The number of octets in all packets observed for this flow at the
      Observation Point since the previous report (if any).  The number
      of octets include IP header(s) and IP payload.

   Abstract Data Type: unsigned64

   Data Type Semantics: deltaCounter

   ElementId: 138

   Status: current

   Units: octets

5.7.7  packetDeltaCount
   Description:
      The number of all packets observed for this flow at the
      Observation Point since the previous report (if any).

   Abstract Data Type: unsigned64

   Data Type Semantics: deltaCounter

   ElementId: 139

   Status: current




--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Tue Apr 26 03:46:22 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA10538
	for <ipfix-archive@lists.ietf.org>; Tue, 26 Apr 2005 03:46:22 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQKTF-0007ed-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 26 Apr 2005 02:27:01 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQKTE-0007eH-00
	for ipfix-info@net.doit.wisc.edu; Tue, 26 Apr 2005 02:27:00 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3Q7QxT27001
	for <ipfix-info@net.doit.wisc.edu>; Tue, 26 Apr 2005 09:26:59 +0200 (CEST)
Received: from [10.61.64.237] (ams-clip-vpn-dhcp237.cisco.com [10.61.64.237])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3Q7QwK04732
	for <ipfix-info@net.doit.wisc.edu>; Tue, 26 Apr 2005 09:26:58 +0200 (CEST)
Message-ID: <426DED40.5080200@cisco.com>
Date: Tue, 26 Apr 2005 09:26:56 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] out prefix -> post prefix I.E.
Content-Type: multipart/alternative;
 boundary="------------050902080003090107080407"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------050902080003090107080407
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi, 

ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt

2.3  Naming Conventions for Information Elements

         Middleboxes may change flow properties, such as the DSCP value
         or the source IP address.  There are different Information
         Elements required for the original values of these properites
         and for the modified values.  As a general rule, it is
         recommended that names for Information Elements containing
         the original properties have no specific prefix while names
         of Information Elements _with _containing the modified
         properties have the prefix "post".


First of all, the last sentence should read:


    As a general rule, it is
    recommended that names for Information Elements containing
    the original properties have no specific prefix while names
    of Information Elements containing the modified

Then, to be consistent with the "post" prefix and with 
http://ipfix.doit.wisc.edu/archive/2757.html, I propose to change the 
name of the 4 information elements

   |    19 | OutMulticastPacketCount ->  postMulticastPacketCount 
   |    20 | OutMulticastOctetCount  ->  postMulticastOctetCount  
   |    23 | outOctetDeltaCount      ->  postOctetDeltaCount
   |    24 | outPacketDeltaCount     ->  postPacketDeltaCount     

Regards, Benoit.



--------------050902080003090107080407
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>Hi, 

<a class="moz-txt-link-freetext" href="ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt">ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt</a>

2.3  Naming Conventions for Information Elements

         Middleboxes may change flow properties, such as the DSCP value
         or the source IP address.  There are different Information
         Elements required for the original values of these properites
         and for the modified values.  As a general rule, it is
         recommended that names for Information Elements containing
         the original properties have no specific prefix while names
         of Information Elements <u>with </u>containing the modified
         properties have the prefix "post".


First of all, the last sentence should read:

</pre>
<blockquote>As a general rule, it is
  <br>
recommended that names for Information Elements containing
  <br>
the original properties have no specific prefix while names
  <br>
of Information Elements containing the modified
  <br>
  <br>
</blockquote>
Then, to be consistent with the "post" prefix and with
<a class="moz-txt-link-freetext" href="http://ipfix.doit.wisc.edu/archive/2757.html">http://ipfix.doit.wisc.edu/archive/2757.html</a>, I propose to change the
name of the 4 information elements<br>
<pre>   |    19 | OutMulticastPacketCount -&gt;  postMulticastPacketCount 
   |    20 | OutMulticastOctetCount  -&gt;  postMulticastOctetCount  
   |    23 | outOctetDeltaCount      -&gt;  postOctetDeltaCount
  &nbsp;|    24 | outPacketDeltaCount     -&gt;  postPacketDeltaCount     </pre>
Regards, Benoit.<br>
<br>
<br>
<pre>
</pre>
</body>
</html>

--------------050902080003090107080407--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Tue Apr 26 10:50:21 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA14305
	for <ipfix-archive@lists.ietf.org>; Tue, 26 Apr 2005 10:50:20 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQRDd-0005n1-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 26 Apr 2005 09:39:21 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQRDb-0005mu-00
	for ipfix-info@net.doit.wisc.edu; Tue, 26 Apr 2005 09:39:20 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3QEdI300220
	for <ipfix-info@net.doit.wisc.edu>; Tue, 26 Apr 2005 16:39:18 +0200 (CEST)
Received: from [10.61.64.48] (ams-clip-vpn-dhcp48.cisco.com [10.61.64.48])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3QEdHK10525
	for <ipfix-info@net.doit.wisc.edu>; Tue, 26 Apr 2005 16:39:18 +0200 (CEST)
Message-ID: <426E5295.8080602@cisco.com>
Date: Tue, 26 Apr 2005 16:39:17 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: [ipfix-info] BGP related Information Elements
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Dear all,

As already noted during the internal IPFIX meeting at Washington, there 
are some discrepancies regarding the BGP related Information Element.
Hereafter the list of them

ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt 
 
| 16 | bgpSourceAsNumber
| 17 | bgpDestinationAsNumber
| 18 | bgpNextHopIpV4Address
| 63 | bgpNextHopIpV6Address
| 128 | bgpNextHopAsNumber
| 129 | ipNextHopAsNumber

I'm trying to answer this simple question: 
Which I.E. should I use if a flow is coming from AS1 to AS5 and observed on a BGP router in AS3?

   AS1 ----- AS2 ------ AS3 -----AS4 ------AS5
  --------------------------------------------> flow

If I configure the router in AS3 to export the origin AS's (for the one familiar with NetFlow), the flow record contains:
AS1 and AS5, exported in #16 and #17 respectively. This is OK.

If I configure the router in AS3 to export the peer AS's (for the one familiar with NetFlow), the flow record contains:
- AS2 and AS4 (**), exported in #? (*) and #128 (**) respectively

 (*) I don't find the respective I.E.
 (** ) attention: according to the current definition, if "bgp next-hop 
 self" is configured on the router in AS3, this I.E. will report AS3!!
 So I don't think the current I.E. #128 is useful as we have to know 
 on the collector's side whether next-hop self is configured on not!

I would like to propose that 
1. we change #128 to bgpDstPeerASNumber with a new definition (to avoid the problem with the next hop-self)
2. we change #129 to bgpSrcPeerASNumber. Why changing #129 and not using the a new I.E? Because I think it was the intended goal behind its definition.

5.4.6  bgpDstPeerASNumber
  Description:
    The autonomous system (AS) number of the next AS in the AS path to 
    which packets of this flow are forwarded.

  Abstract Data Type: unsigned16

  Data Type Semantics: identifier

  ElementId: 128
 
  Status: current

  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
    definition of the AS number.


5.4.6  bgpSrcPeerASNumber

  Description:
     The autonomous system (AS) number of the previous AS in the AS path 
     from which packets of this flow arrived. In case of BGP asymmetry, the     
     bgpPreviousAsNumber might not be able to report the correct value.

 Data Type Semantics: identifier

 ElementId: 129

 Status: current

 Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
    definition of the AS number.


Does someone have a different view?

Regards, Benoit.


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From IgnacioSmall@gbop.com  Tue Apr 26 12:47:05 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA25229
	for <ipfix-archive@lists.ietf.org>; Tue, 26 Apr 2005 12:47:04 -0400 (EDT)
Received: from [211.105.136.14] (helo=gbop.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DQSu3-0001AT-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 26 Apr 2005 11:27:15 -0500
From: "Ignacio Small" <IgnacioSmall@gbop.com>
To: "Gosse Mclendon" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: V-AGRA Vallium C1ALlS
Date: Tue, 26 Apr 2005 12:27:08 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C545A2.426E79EC"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: (bl.spamcop.net) Blocked - see http://www.spamcop.net/bl.shtml?211.105.136.14
Message-Id: <E1DQSu3-0001AT-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C545A2.426E79EC
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

great force to harass the Spaniards upon sea and land, and to kee


Mr. Blood got between the day-bed and the troopers.
That's mighty condescending of you!



An indefinite sense of alarm drove him to open his eyes again, an
without speaking, and until she spoke he dared not advance farthe
direction in which she was pointing.  Then slowly, with his
She touched her horse with her little silver-hilted whip.  I
hold at once an impartial investigation into the affair, and the
Colonel Bishop sat himself down on the hatch-coaming, took off hi
fragrant air, which was unlike any air that he had ever breathed.


Have a nice day.
------=_NextPart_000_0008_01C545A2.426E79EC
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>&nbsp;</DIV>
<TABLE style=3D"FONT-SIZE: 15px; FONT-FAMILY: Arial" cellSpacing=3D1 =
cellPadding=3D3=20
width=3D500 bgColor=3Dwhite>
  <TBODY>
  <TR bgColor=3D#3333cc>
    <TH style=3D"COLOR: white">Hello, =
Would you like to spend less on your MEDlCAATlONS?</TH></TR>
  <TR bgColor=3D#cccccc>
    <TD=20
    style=3D"PADDING-RIGHT: 20px; PADDING-LEFT: 20px; PADDING-BOTTOM: =
10px; PADDING-TOP: 10px">
      <DIV><B>Visit <A style=3D"FONT-SIZE: 14px; TEXT-DECORATION: =
underline"=20
      href=3D"http://www.ppn.adx.org.agreeocompro.com">=
PharmacyByMail STTORE and SAVE OVER   7 0 %</A></B>=20
      <DIV>&nbsp;</DIV>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>V</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>gr</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>ia</B></TD>
          <TD><B>a</B>&nbsp;$<B><FONT =
color=3Dred>200</FONT></B>=20
            (120 piIls)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Ci</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>li</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>a</B></TD>
          <TD><B>s</B>&nbsp;$<B><FONT =
color=3Dred>180</FONT></B>=20
            (80 pilIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Va</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>iu</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>l</B></TD>
          <TD><B>m</B>&nbsp;$<B><FONT =
color=3Dred>250</FONT></B>=20
            (220 piIls)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>Le</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>t</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>vi</B></TD>
          <TD><B>ra</B>&nbsp;$<B><FONT =
color=3Dred>300</FONT></B>=20
            (50 pilIs)</TD></TR></TBODY></TABLE>
      <TABLE style=3D"FONT-SIZE: 15px" cellSpacing=3D0 cellPadding=3D0 =
border=3D0>
        <TBODY>
        <TR vAlign=3Dbottom>
          <TD rowSpan=3D2><B>X</B></TD>
          <TD></TD>
          <TD rowSpan=3D2><B>a</B></TD>
          <TD></TD></TR>
        <TR>
          <TD><B>an</B></TD>
          <TD><B>x</B>&nbsp;$<B><FONT =
color=3Dred>270</FONT></B>=20
            (200 piIIs)<B>&nbsp;and many =
other</B></TD></TR></TBODY></TABLE>
      <DIV>&nbsp;</DIV>
      <DIV>Have a nice day.</DIV>
      <DIV><B>P.S.</B> 
	<I> You will be plleasantly surprised with our prices! =
	</I></DIV></DIV></TD></TR></TBODY></TABLE></BODY></HTML>

------=_NextPart_000_0008_01C545A2.426E79EC--



From majordomo@mil.doit.wisc.edu  Tue Apr 26 13:57:42 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA00863
	for <ipfix-archive@lists.ietf.org>; Tue, 26 Apr 2005 13:57:41 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQUA9-0003Pw-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 26 Apr 2005 12:47:57 -0500
Received: from mrout2.yahoo.com ([216.145.54.172])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQUA8-0003Pr-00
	for ipfix-info@net.doit.wisc.edu; Tue, 26 Apr 2005 12:47:56 -0500
Received: from [66.228.162.78] (snapdragon.corp.yahoo.com [66.228.162.78])
	by mrout2.yahoo.com (8.13.4/8.13.4/y.out) with ESMTP id j3QHl9tY015249
	for <ipfix-info@net.doit.wisc.edu>; Tue, 26 Apr 2005 10:47:09 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; s=serpent; d=yahoo-inc.com; c=nofws; q=dns;
	h=message-id:date:from:user-agent:x-accept-language:
	mime-version:to:subject:references:in-reply-to:content-type:content-transfer-encoding;
	b=gA3ADFUKPKq7eLhj2ZpUWf6vmyvb+Pd38GsPQs2GysYnDRtgY0uFGS9QXs/FLX6Z
Message-ID: <426E7E9D.90609@yahoo-inc.com>
Date: Tue, 26 Apr 2005 10:47:09 -0700
From: Eric Ji <eji@yahoo-inc.com>
User-Agent: Mozilla Thunderbird 0.9 (X11/20041116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-info@net.doit.wisc.edu
Subject: Re: [ipfix-info] BGP related Information Elements
References: <426E5295.8080602@cisco.com>
In-Reply-To: <426E5295.8080602@cisco.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Benoit,

Very good analysis. My opinion about this, bgp nexthop-self is to use 
the interface bgp runs on as the nexthop in route advertisement. It's to 
tell its peers to use this address, but doesnt affect nexthops in its 
own routing table. Therefore it should not affect the flow ASes.
In your example, AS3 should export AS1 as 16, AS5 as 17, AS4 as 128. I 
know Cisco has option to export either origin AS or peer AS, not both, 
but in reality both are useful. So we may make it consitent to export 
src AS, dest AS, peer AS. As for ipNexthopAs, is that the immediate 
nexthop AS? Normally IGP is used for bgp nexthop reachability, and they 
are in same AS, so it's not so useful as the other three.
As for the name of 128. I agree with you, bgpDstPeerASNumber is more 
clear to describe this. And this depends on the bgp peer session type, 
IBGP or EBGP. For the former, the current router may not know the next 
AS in the AS path to destination. So I'd prefer the following description:

 > 5.4.6  bgpDstPeerASNumber
 >  Description:
 >    The autonomous system (AS) number of bgp peer AS in the path to
 > which packets of this flow are forwarded. If it's IBGP, it's the same
 > as local AS, and if it's EBGP, it's the next AS in AS path.
 >
 >  Abstract Data Type: unsigned16
 >
 >  Data Type Semantics: identifier
 >
 >  ElementId: 128
 >
 >  Status: current
 >
 >  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
 >    definition of the AS number.

Similar for 129 if it's changed to bgpSrcPeerASNumber.

Regards,
Eric



Benoit Claise wrote:
> Dear all,
> 
> As already noted during the internal IPFIX meeting at Washington, there 
> are some discrepancies regarding the BGP related Information Element.
> Hereafter the list of them
> 
> ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt 
> 
> | 16 | bgpSourceAsNumber
> | 17 | bgpDestinationAsNumber
> | 18 | bgpNextHopIpV4Address
> | 63 | bgpNextHopIpV6Address
> | 128 | bgpNextHopAsNumber
> | 129 | ipNextHopAsNumber
> 
> I'm trying to answer this simple question: Which I.E. should I use if a 
> flow is coming from AS1 to AS5 and observed on a BGP router in AS3?
> 
>   AS1 ----- AS2 ------ AS3 -----AS4 ------AS5
>  --------------------------------------------> flow
> 
> If I configure the router in AS3 to export the origin AS's (for the one 
> familiar with NetFlow), the flow record contains:
> AS1 and AS5, exported in #16 and #17 respectively. This is OK.
> 
> If I configure the router in AS3 to export the peer AS's (for the one 
> familiar with NetFlow), the flow record contains:
> - AS2 and AS4 (**), exported in #? (*) and #128 (**) respectively
> 
> (*) I don't find the respective I.E.
> (** ) attention: according to the current definition, if "bgp next-hop 
> self" is configured on the router in AS3, this I.E. will report AS3!!
> So I don't think the current I.E. #128 is useful as we have to know on 
> the collector's side whether next-hop self is configured on not!
> 
> I would like to propose that 1. we change #128 to bgpDstPeerASNumber 
> with a new definition (to avoid the problem with the next hop-self)
> 2. we change #129 to bgpSrcPeerASNumber. Why changing #129 and not using 
> the a new I.E? Because I think it was the intended goal behind its 
> definition.
> 
> 5.4.6  bgpDstPeerASNumber
>  Description:
>    The autonomous system (AS) number of the next AS in the AS path to    
> which packets of this flow are forwarded.
> 
>  Abstract Data Type: unsigned16
> 
>  Data Type Semantics: identifier
> 
>  ElementId: 128
> 
>  Status: current
> 
>  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>    definition of the AS number.
> 
> 
> 5.4.6  bgpSrcPeerASNumber
> 
>  Description:
>     The autonomous system (AS) number of the previous AS in the AS path 
>     from which packets of this flow arrived. In case of BGP asymmetry, 
> the         bgpPreviousAsNumber might not be able to report the correct 
> value.
> 
> Data Type Semantics: identifier
> 
> ElementId: 129
> 
> Status: current
> 
> Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>    definition of the AS number.
> 
> 
> Does someone have a different view?
> 
> Regards, Benoit.
> 
> 
> -- 
> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message 
> body
> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
> "unsubscribe ipfix" in message body
> Archive     http://ipfix.doit.wisc.edu/archive/
> 
> 
> 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From info@mail.kqsv15.com  Tue Apr 26 14:41:36 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA04332
	for <ipfix-archive@lists.ietf.org>; Tue, 26 Apr 2005 14:41:35 -0400 (EDT)
Received: from [61.106.54.179] (helo=mail.kqsv15.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DQUtl-0004Z3-00
	for ipfix-list@mil.doit.wisc.edu; Tue, 26 Apr 2005 13:35:05 -0500
Received: (qmail 22421 invoked by uid 509); 23 Apr 2005 22:06:49 +0900
Date: 23 Apr 2005 22:06:49 +0900
Message-ID: <20050423130649.22419.qmail@mail.kqsv15.com>
From: info@kqsv15.com
To: ipfix-list@mil.doit.wisc.edu
Subject: $B!y(B10000$B1_J,L5NA!y(B

$B"#"#"#!V(B10000$B1_!WJ,L5NA%]%$%s%HB#Dh%-%c%s%Z!<%s<B;\Cf!*"#"#"#(B

$B$3$N=U$N=P2q$$$r6/NO$K;Y1g$7$^$9!*(B
$B:#$9$0EPO?$7$FD:$$$?J}$K$O!";O$a$K(B10000$B1_J,$N%]%$%s%H$rL5NA$G:9$7>e$2$^$9!*(B

$B"!(B10000$B1_L5NA%]%$%s%H$H?7$7$$=P2q$$(BGET$B!*"*"*"*(B http://awg.webchu.com/?springo

$B!zL5NA$GAjEvM7$Y$^$9$N$G@'Hs$*;n$72<$5$$$M"v(B
$B!z;HMQ$7$F$_$F!V$3$l$O!*!W$H;W$C$FD:$$$?J}$N$_!VM-NA!W$X$*?J$_2<$5$$!#(B

$B%a!<%k$N<u?.$r5qH]$9$k>l9g$O2<5-(BURL$B$KJV?.2<$5$$(B
kirara111@mail.ru


From majordomo@mil.doit.wisc.edu  Wed Apr 27 12:44:06 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA01453
	for <ipfix-archive@lists.ietf.org>; Wed, 27 Apr 2005 12:44:05 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQpBK-0004K5-00
	for ipfix-list@mil.doit.wisc.edu; Wed, 27 Apr 2005 11:14:34 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQpBJ-0004Jz-00
	for ipfix-info@net.doit.wisc.edu; Wed, 27 Apr 2005 11:14:33 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3RGEWc19102;
	Wed, 27 Apr 2005 18:14:32 +0200 (CEST)
Received: from [64.103.12.26] (dhcp-64-103-12-26.cisco.com [64.103.12.26])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3RGEVK05437;
	Wed, 27 Apr 2005 18:14:31 +0200 (CEST)
Message-ID: <426FBA65.5030304@cisco.com>
Date: Wed, 27 Apr 2005 18:14:29 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Eric Ji <eji@yahoo-inc.com>
CC: ipfix-info@net.doit.wisc.edu
Subject: Re: [ipfix-info] BGP related Information Elements
References: <426E5295.8080602@cisco.com> <426E7E9D.90609@yahoo-inc.com>
In-Reply-To: <426E7E9D.90609@yahoo-inc.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Eric,

> Benoit,
>
> Very good analysis. My opinion about this, bgp nexthop-self is to use 
> the interface bgp runs on as the nexthop in route advertisement. It's 
> to tell its peers to use this address, but doesnt affect nexthops in 
> its own routing table. 

Right, but don't forget that there are other BGP routers in that same 
AS. That will change something for them.

> Therefore it should not affect the flow ASes.
> In your example, AS3 should export AS1 as 16, AS5 as 17, AS4 as 128. I 
> know Cisco has option to export either origin AS or peer AS, not both, 
> but in reality both are useful. 

I agree. This is the reason of the new proposed #128 and #129 definitions.

> So we may make it consitent to export src AS, dest AS, peer AS. As for 
> ipNexthopAs, is that the immediate nexthop AS? Normally IGP is used 
> for bgp nexthop reachability, and they are in same AS, so it's not so 
> useful as the other three.
> As for the name of 128. I agree with you, bgpDstPeerASNumber is more 
> clear to describe this. And this depends on the bgp peer session type, 
> IBGP or EBGP. For the former, the current router may not know the next 
> AS in the AS path to destination. So I'd prefer the following 
> description:

Well. The bgpDstPeerASNumber definition I propose has been specified so 
that,
if the flow goes to a router in AS3:
- you would export AS2  for bgpDstPeerASNumber if you export from R10
- you would export AS2  for bgpDstPeerASNumber if you export from R12
With my proposed definition, this is indepent of the next-hop self 
configured on R12

  R10----R11----R12  --------- R20 -------------R30
 <------AS1--------->           <-AS2->           <-AS3->
 ----------------------flow------------------------------->



Note that with the example above and the #128 I.E. in 
ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt, 
and with next-hop self on R12
- you would export AS1  for #128  if you export from R10
- you would export AS2  for #128  if you export from R12


>
> > 5.4.6  bgpDstPeerASNumber
> >  Description:
> >    The autonomous system (AS) number of bgp peer AS in the path to
> > which packets of this flow are forwarded. If it's IBGP, it's the same
> > as local AS, and if it's EBGP, it's the next AS in AS path.

The information element definition should be independent of iBGP or 
eBGP, otherwise the collector has no clue about about the meaning of the 
information elements unless he knows whether this is iBGP or an eBGP. So 
I prefer my proposed definition:
   The autonomous system (AS) number of the next AS in the AS path to 
which packets of this flow are forwarded.

Regards, Benoit.

> >
> >  Abstract Data Type: unsigned16
> >
> >  Data Type Semantics: identifier
> >
> >  ElementId: 128
> >
> >  Status: current
> >
> >  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
> >    definition of the AS number.
>
> Similar for 129 if it's changed to bgpSrcPeerASNumber.
>
> Regards,
> Eric
>
>
>
> Benoit Claise wrote:
>
>> Dear all,
>>
>> As already noted during the internal IPFIX meeting at Washington, 
>> there are some discrepancies regarding the BGP related Information 
>> Element.
>> Hereafter the list of them
>>
>> ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt 
>>
>> | 16 | bgpSourceAsNumber
>> | 17 | bgpDestinationAsNumber
>> | 18 | bgpNextHopIpV4Address
>> | 63 | bgpNextHopIpV6Address
>> | 128 | bgpNextHopAsNumber
>> | 129 | ipNextHopAsNumber
>>
>> I'm trying to answer this simple question: Which I.E. should I use if 
>> a flow is coming from AS1 to AS5 and observed on a BGP router in AS3?
>>
>>   AS1 ----- AS2 ------ AS3 -----AS4 ------AS5
>>  --------------------------------------------> flow
>>
>> If I configure the router in AS3 to export the origin AS's (for the 
>> one familiar with NetFlow), the flow record contains:
>> AS1 and AS5, exported in #16 and #17 respectively. This is OK.
>>
>> If I configure the router in AS3 to export the peer AS's (for the one 
>> familiar with NetFlow), the flow record contains:
>> - AS2 and AS4 (**), exported in #? (*) and #128 (**) respectively
>>
>> (*) I don't find the respective I.E.
>> (** ) attention: according to the current definition, if "bgp 
>> next-hop self" is configured on the router in AS3, this I.E. will 
>> report AS3!!
>> So I don't think the current I.E. #128 is useful as we have to know 
>> on the collector's side whether next-hop self is configured on not!
>>
>> I would like to propose that 1. we change #128 to bgpDstPeerASNumber 
>> with a new definition (to avoid the problem with the next hop-self)
>> 2. we change #129 to bgpSrcPeerASNumber. Why changing #129 and not 
>> using the a new I.E? Because I think it was the intended goal behind 
>> its definition.
>>
>> 5.4.6  bgpDstPeerASNumber
>>  Description:
>>    The autonomous system (AS) number of the next AS in the AS path 
>> to    which packets of this flow are forwarded.
>>
>>  Abstract Data Type: unsigned16
>>
>>  Data Type Semantics: identifier
>>
>>  ElementId: 128
>>
>>  Status: current
>>
>>  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>>    definition of the AS number.
>>
>>
>> 5.4.6  bgpSrcPeerASNumber
>>
>>  Description:
>>     The autonomous system (AS) number of the previous AS in the AS 
>> path     from which packets of this flow arrived. In case of BGP 
>> asymmetry, the         bgpPreviousAsNumber might not be able to 
>> report the correct value.
>>
>> Data Type Semantics: identifier
>>
>> ElementId: 129
>>
>> Status: current
>>
>> Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>>    definition of the AS number.
>>
>>
>> Does someone have a different view?
>>
>> Regards, Benoit.
>>
>>
>> -- 
>> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in 
>> message body
>> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
>> "unsubscribe ipfix" in message body
>> Archive     http://ipfix.doit.wisc.edu/archive/
>>
>>
>>
>
> -- 
> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in 
> message body
> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
> "unsubscribe ipfix" in message body
> Archive     http://ipfix.doit.wisc.edu/archive/



--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Wed Apr 27 15:09:49 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA13899
	for <ipfix-archive@lists.ietf.org>; Wed, 27 Apr 2005 15:09:49 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQrjW-0001YY-00
	for ipfix-list@mil.doit.wisc.edu; Wed, 27 Apr 2005 13:58:02 -0500
Received: from mrout3.yahoo.com ([216.145.54.173])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQrjV-0001YT-00
	for ipfix-info@net.doit.wisc.edu; Wed, 27 Apr 2005 13:58:01 -0500
Received: from [66.228.162.78] (snapdragon.corp.yahoo.com [66.228.162.78])
	by mrout3.yahoo.com (8.13.4/8.13.4/y.out) with ESMTP id j3RIv8DY095958;
	Wed, 27 Apr 2005 11:57:08 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; s=serpent; d=yahoo-inc.com; c=nofws; q=dns;
	h=message-id:date:from:user-agent:x-accept-language:
	mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding;
	b=U254M2hyCveZlpssk2osL1YxLyUnpd9QTAll/31Te8ioNRuCu/JZMfuG4wCd440k
Message-ID: <426FE084.7000306@yahoo-inc.com>
Date: Wed, 27 Apr 2005 11:57:08 -0700
From: Eric Ji <eji@yahoo-inc.com>
User-Agent: Mozilla Thunderbird 0.9 (X11/20041116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Benoit Claise <bclaise@cisco.com>
CC: ipfix-info@net.doit.wisc.edu
Subject: Re: [ipfix-info] BGP related Information Elements
References: <426E5295.8080602@cisco.com> <426E7E9D.90609@yahoo-inc.com> <426FBA65.5030304@cisco.com>
In-Reply-To: <426FBA65.5030304@cisco.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Benoit,

I agree with your proposed definition. Actually I just think we needn't 
mention nexthop-self at all, it should not affect the flow AS export. 
And same thing for I/EBGP. But the definition need change due to the 
issues as in my comments. I can do this if needed.

Regards,
Eric

Benoit Claise wrote:
> Eric,
> 
>> Benoit,
>>
>> Very good analysis. My opinion about this, bgp nexthop-self is to use 
>> the interface bgp runs on as the nexthop in route advertisement. It's 
>> to tell its peers to use this address, but doesnt affect nexthops in 
>> its own routing table. 
> 
> 
> Right, but don't forget that there are other BGP routers in that same 
> AS. That will change something for them.
--------
comments: If they are in same AS. (1) if full mesh is used, they dont 
exchange routes among themselves, nothing in other routers' routing 
table is affected. (2) if confederation/reflector etc is used, it may 
affect other routers' bgp route nexthop, but ASpath is not affected by 
nexthop-self command.
Therefore, nexthop-self would not affect ASpath in BGP, and it should 
not affect AS export.

>> Therefore it should not affect the flow ASes.
>> In your example, AS3 should export AS1 as 16, AS5 as 17, AS4 as 128. I 
>> know Cisco has option to export either origin AS or peer AS, not both, 
>> but in reality both are useful. 
> 
> 
> I agree. This is the reason of the new proposed #128 and #129 definitions.
> 
>> So we may make it consitent to export src AS, dest AS, peer AS. As for 
>> ipNexthopAs, is that the immediate nexthop AS? Normally IGP is used 
>> for bgp nexthop reachability, and they are in same AS, so it's not so 
>> useful as the other three.
>> As for the name of 128. I agree with you, bgpDstPeerASNumber is more 
>> clear to describe this. And this depends on the bgp peer session type, 
>> IBGP or EBGP. For the former, the current router may not know the next 
>> AS in the AS path to destination. So I'd prefer the following 
>> description:
> 
> 
> Well. The bgpDstPeerASNumber definition I propose has been specified so 
> that,
> if the flow goes to a router in AS3:
> - you would export AS2  for bgpDstPeerASNumber if you export from R10
> - you would export AS2  for bgpDstPeerASNumber if you export from R12
> With my proposed definition, this is indepent of the next-hop self 
> configured on R12
> 
>  R10----R11----R12  --------- R20 -------------R30
> <------AS1--------->           <-AS2->           <-AS3->
> ----------------------flow------------------------------->
> 
> 
> 
> Note that with the example above and the #128 I.E. in 
> ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt, 
> and with next-hop self on R12
> - you would export AS1  for #128  if you export from R10
> - you would export AS2  for #128  if you export from R12
------
comments: I agree with this. Exporting same AS as local AS may not be 
useful to network admins. The next different AS, in most case it means 
different carriers or networks, are much more useful.

> 
>>
>> > 5.4.6  bgpDstPeerASNumber
>> >  Description:
>> >    The autonomous system (AS) number of bgp peer AS in the path to
>> > which packets of this flow are forwarded. If it's IBGP, it's the same
>> > as local AS, and if it's EBGP, it's the next AS in AS path.
> 
> 
> The information element definition should be independent of iBGP or 
> eBGP, otherwise the collector has no clue about about the meaning of the 
> information elements unless he knows whether this is iBGP or an eBGP. So 
> I prefer my proposed definition:
>   The autonomous system (AS) number of the next AS in the AS path to 
> which packets of this flow are forwarded.
-----
comments:
I think we need look more into this. Current issues:
(1) the next AS may not necessarily be different, it's not uncommon to 
loop AS, i.e, repeat AS in ASpath to make it less preferable in the 
routing calculation. Juniper has option to control that.
(2) For AS_SEQUENCE, it's ok. But for AS_SET, since multiple ASes are 
combined together into a SET, no single AS stands out as the 'peerAS' 
per definition.
My tentative propose is a change to your definition above:
The autonomous system (AS) number of the next AS in the AS path, which 
is different from local AS, to which packets of this flow are forwarded.


> Regards, Benoit.
> 
>> >
>> >  Abstract Data Type: unsigned16
>> >
>> >  Data Type Semantics: identifier
>> >
>> >  ElementId: 128
>> >
>> >  Status: current
>> >
>> >  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>> >    definition of the AS number.
>>
>> Similar for 129 if it's changed to bgpSrcPeerASNumber.
>>
>> Regards,
>> Eric
>>
>>
>>
>> Benoit Claise wrote:
>>
>>> Dear all,
>>>
>>> As already noted during the internal IPFIX meeting at Washington, 
>>> there are some discrepancies regarding the BGP related Information 
>>> Element.
>>> Hereafter the list of them
>>>
>>> ftp://ftp.netlab.nec.de/pub/internet-drafts/draft-ietf-ipfix-info-07-pre.txt 
>>>
>>> | 16 | bgpSourceAsNumber
>>> | 17 | bgpDestinationAsNumber
>>> | 18 | bgpNextHopIpV4Address
>>> | 63 | bgpNextHopIpV6Address
>>> | 128 | bgpNextHopAsNumber
>>> | 129 | ipNextHopAsNumber
>>>
>>> I'm trying to answer this simple question: Which I.E. should I use if 
>>> a flow is coming from AS1 to AS5 and observed on a BGP router in AS3?
>>>
>>>   AS1 ----- AS2 ------ AS3 -----AS4 ------AS5
>>>  --------------------------------------------> flow
>>>
>>> If I configure the router in AS3 to export the origin AS's (for the 
>>> one familiar with NetFlow), the flow record contains:
>>> AS1 and AS5, exported in #16 and #17 respectively. This is OK.
>>>
>>> If I configure the router in AS3 to export the peer AS's (for the one 
>>> familiar with NetFlow), the flow record contains:
>>> - AS2 and AS4 (**), exported in #? (*) and #128 (**) respectively
>>>
>>> (*) I don't find the respective I.E.
>>> (** ) attention: according to the current definition, if "bgp 
>>> next-hop self" is configured on the router in AS3, this I.E. will 
>>> report AS3!!
>>> So I don't think the current I.E. #128 is useful as we have to know 
>>> on the collector's side whether next-hop self is configured on not!
>>>
>>> I would like to propose that 1. we change #128 to bgpDstPeerASNumber 
>>> with a new definition (to avoid the problem with the next hop-self)
>>> 2. we change #129 to bgpSrcPeerASNumber. Why changing #129 and not 
>>> using the a new I.E? Because I think it was the intended goal behind 
>>> its definition.
>>>
>>> 5.4.6  bgpDstPeerASNumber
>>>  Description:
>>>    The autonomous system (AS) number of the next AS in the AS path 
>>> to    which packets of this flow are forwarded.
>>>
>>>  Abstract Data Type: unsigned16
>>>
>>>  Data Type Semantics: identifier
>>>
>>>  ElementId: 128
>>>
>>>  Status: current
>>>
>>>  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>>>    definition of the AS number.
>>>
>>>
>>> 5.4.6  bgpSrcPeerASNumber
>>>
>>>  Description:
>>>     The autonomous system (AS) number of the previous AS in the AS 
>>> path     from which packets of this flow arrived. In case of BGP 
>>> asymmetry, the         bgpPreviousAsNumber might not be able to 
>>> report the correct value.
>>>
>>> Data Type Semantics: identifier
>>>
>>> ElementId: 129
>>>
>>> Status: current
>>>
>>> Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>>>    definition of the AS number.
>>>
>>>
>>> Does someone have a different view?
>>>
>>> Regards, Benoit.
>>>
>>>
>>> -- 
>>> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in 
>>> message body
>>> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
>>> "unsubscribe ipfix" in message body
>>> Archive     http://ipfix.doit.wisc.edu/archive/
>>>
>>>
>>>
>>
>> -- 
>> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in 
>> message body
>> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
>> "unsubscribe ipfix" in message body
>> Archive     http://ipfix.doit.wisc.edu/archive/
> 
> 
> 
> 
> 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Kinney@jamestownpaint.com  Wed Apr 27 22:53:04 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA03746
	for <ipfix-archive@lists.ietf.org>; Wed, 27 Apr 2005 22:53:04 -0400 (EDT)
Received: from [222.98.159.207] (helo=jamestownpaint.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DQykb-0007Hk-00
	for ipfix-list@mil.doit.wisc.edu; Wed, 27 Apr 2005 21:27:37 -0500
From: "Fyodor Kinney" <Kinney@jamestownpaint.com>
To: "Tyriq Power" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Wiagra Va11ium Ci-alis
Date: Wed, 27 Apr 2005 22:27:29 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C54A95.42705821"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DQykb-0007Hk-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C54A95.42705821
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

prisoners, the slaves, and most of the captured merchandise.  The
He laughed and sighed in one; but the laugh dominated the sigh, f
then louder than before roared a gun away to leeward, and away on
Julian, the representative of the Secretary of State, say whether
in back-and-breast of black steel.  I'll not be trying your
in our compact, my lord, that there should be no constraining of
Castilian to Don Miguel.
is England, not Tangiers.  The gentleman is in sore case.  He may
He would have clutched the doctor, and haled him forth by force i
mean to hang me, and since that's the worst that can happen to me
prevarication.  But I see that all the pains in the world, and al
his hair as carefully dressed, seemed transformed into a younger
towards the Deputy-Governor.
his foul vocabulary he could find no epithet to describe his
His lieutenant said no more.  But from his glimpse of the letter,


Have a nice day.
------=_NextPart_000_0008_01C54A95.42705821
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT size=3D2></FONT><FONT size=3D3><FONT face=3DArial>Hello , =
<FONT size=3D4><A=20
href=3D"http://www.pfgnt.gmpylp.org.contailett.com"><FONT =
size=3D4>Please Visit
PharrmacyByMail STORE =
and Save up T0   7 0 %</FONT></A>.</FONT></FONT></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>Vi</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>ra&nbsp;Am</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>en&nbsp;Ci</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>is&nbsp;Le</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>tra,</FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>&nbsp;And</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>ag</FONT></TD>
    <TD><FONT face=3DArial size=3D4>bi</FONT></TD>
    <TD><FONT face=3DArial size=3D4>al</FONT></TD>
    <TD><FONT face=3DArial size=3D4>vi</FONT></TD>
    <TD><FONT face=3DArial=20
size=3D4>&nbsp;many&nbsp;other!</FONT></TD></TR></TBODY></TABLE><FONT=20
face=3DArial></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial =
size=3D4>Try us and you will NOTT BE DlSAPPOlNTED!</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D3>Have a nice =
day.</FONT></DIV></BODY></HTML>

------=_NextPart_000_0008_01C54A95.42705821--



From majordomo@mil.doit.wisc.edu  Wed Apr 27 23:29:39 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA06088
	for <ipfix-archive@lists.ietf.org>; Wed, 27 Apr 2005 23:29:39 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DQzdJ-0001OH-00
	for ipfix-list@mil.doit.wisc.edu; Wed, 27 Apr 2005 22:24:09 -0500
Received: from dog.tcb.net ([64.78.150.133])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DQzdI-0001NY-00
	for ipfix-info@net.doit.wisc.edu; Wed, 27 Apr 2005 22:24:08 -0500
Received: from [172.20.100.203] (unknown [64.186.162.194])
	(using TLSv1 with cipher RC4-SHA (128/128 bits))
	(No client certificate requested)
	by dog.tcb.net (Postfix) with ESMTP id 8EDCB64578
	for <ipfix-info@net.doit.wisc.edu>; Wed, 27 Apr 2005 21:24:57 -0600 (MDT)
Mime-Version: 1.0 (Apple Message framework v622)
In-Reply-To: <426FE084.7000306@yahoo-inc.com>
References: <426E5295.8080602@cisco.com> <426E7E9D.90609@yahoo-inc.com> <426FBA65.5030304@cisco.com> <426FE084.7000306@yahoo-inc.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <000e613ec6d01630412189fd63a69e7a@tcb.net>
Content-Transfer-Encoding: 7bit
From: Danny McPherson <danny@tcb.net>
Subject: Re: [ipfix-info] BGP related Information Elements
Date: Wed, 27 Apr 2005 21:24:06 -0600
To: ipfix-info@net.doit.wisc.edu
X-Mailer: Apple Mail (2.622)
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

> -----
> comments:
> I think we need look more into this. Current issues:
> (1) the next AS may not necessarily be different, it's not uncommon to 
> loop AS, i.e, repeat AS in ASpath to make it less preferable in the 
> routing calculation. Juniper has option to control that.

The local AS is never added to the AS_PATH until the route is
advertised to an external BGP peer (or BGP confederation peer).
Padding (i.e., typically prepending only occurs on route advertisement
to an external BGP peer).  There are some hacks for this but I
don't believe IPFIX should attempt to accommodate those corner
cases.

> (2) For AS_SEQUENCE, it's ok. But for AS_SET, since multiple ASes are 
> combined together into a SET, no single AS stands out as the 'peerAS' 
> per definition.
> My tentative propose is a change to your definition above:
> The autonomous system (AS) number of the next AS in the AS path, which 
> is different from local AS, to which packets of this flow are 
> forwarded.

You really don't know whether packets are actually going to be forwarded
along that path (I know, rathole), all that this is really reporting is 
that
the peerAS value represents that of the leftmost AS path segment in the
AS_PATH for the best BGP route associated with the destination prefix 
(i.e.,
the BGP Loc-RIB entry).

Indeed, if the leftmost (first) path segment in the AS_PATH contains an
AS_SET, multiple AS values could be returned.  We should account for 
that
condition.

Finally, while not the case with route reflection, we should perhaps
account for AS_CONFED_SET and AS_CONFED_SEQUENCE in the AS_PATH.

-danny






--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Wed Apr 27 23:55:27 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA07921
	for <ipfix-archive@lists.ietf.org>; Wed, 27 Apr 2005 23:55:27 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DR01s-00025I-00
	for ipfix-list@mil.doit.wisc.edu; Wed, 27 Apr 2005 22:49:32 -0500
Received: from dog.tcb.net ([64.78.150.133])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DR01r-00025C-00
	for ipfix-info@net.doit.wisc.edu; Wed, 27 Apr 2005 22:49:31 -0500
Received: from [172.20.100.203] (unknown [64.186.162.194])
	(using TLSv1 with cipher RC4-SHA (128/128 bits))
	(No client certificate requested)
	by dog.tcb.net (Postfix) with ESMTP id 1E27864576
	for <ipfix-info@net.doit.wisc.edu>; Wed, 27 Apr 2005 21:50:20 -0600 (MDT)
Mime-Version: 1.0 (Apple Message framework v622)
In-Reply-To: <426E5295.8080602@cisco.com>
References: <426E5295.8080602@cisco.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <7ab543168fd86ef01096ded6d744219f@tcb.net>
Content-Transfer-Encoding: 7bit
From: Danny McPherson <danny@tcb.net>
Subject: Re: [ipfix-info] BGP related Information Elements
Date: Wed, 27 Apr 2005 21:49:27 -0600
To: ipfix-info@net.doit.wisc.edu
X-Mailer: Apple Mail (2.622)
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit


On Apr 26, 2005, at 8:39 AM, Benoit Claise wrote:
>
> If I configure the router in AS3 to export the origin AS's (for the 
> one familiar with NetFlow), the flow record contains:
> AS1 and AS5, exported in #16 and #17 respectively. This is OK.
>
> If I configure the router in AS3 to export the peer AS's (for the one 
> familiar with NetFlow), the flow record contains:
> - AS2 and AS4 (**), exported in #? (*) and #128 (**) respectively
>
> (*) I don't find the respective I.E.
> (** ) attention: according to the current definition, if "bgp next-hop 
> self" is configured on the router in AS3, this I.E. will report AS3!!

And indeed the BGP NEXT_HOP is most always most always within
the local AS, unless on the AS egress border router.  I'm not sure
I understand why anyone would want to report on the "origin AS"
value for the BGP NEXT_HOP anyways.  Could someone explain this to
me?  The BGP NEXT_HOP itself makes sense, but recursive lookups
for the "origin AS" of the BGP NEXT_HOP seems a bit silly to me -
perhaps I'm missing something?

> So I don't think the current I.E. #128 is useful as we have to know on 
> the collector's side whether next-hop self is configured on not!


> I would like to propose that 1. we change #128 to bgpDstPeerASNumber 
> with a new definition (to avoid the problem with the next hop-self)
> 2. we change #129 to bgpSrcPeerASNumber. Why changing #129 and not 
> using the a new I.E? Because I think it was the intended goal behind 
> its definition.
>
> 5.4.6  bgpDstPeerASNumber

I'd prefer a name with bgpDstAdjacentASNumber or the like, as this is 
still a bit
confusing.

>  Description:
>    The autonomous system (AS) number of the next AS in the AS path to 
> which packets of this flow are forwarded.

"next AS" should probably read something like "leftmost" or "first" AS 
segment
in the AS_PATH, where the term "segment" is employed to accommodate 
either
a single AS or an AS_SET.

>
>  Abstract Data Type: unsigned16

Could be multiple entries with an AS_SET.

>  Data Type Semantics: identifier
>
>  ElementId: 128
>  Status: current
>
>  Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>    definition of the AS number.

s/BGB-4/BGP-4/

Also, you might want to scrap the RFC 1930 reference and just use
RFC 1771 or ietf-idr-bgp-26.txt.

>
> 5.4.6  bgpSrcPeerASNumber

Same issue..  Something like bgpSrcAdjacentASNumber or the like.
>
>  Description:
>     The autonomous system (AS) number of the previous AS in the AS 
> path     from which packets of this flow arrived. In case of BGP 
> asymmetry, the         bgpPreviousAsNumber might not be able to report 
> the correct value.

Note the "Previous" in the name above.  Also, should you say something 
about
source and destination prefixes here and above, it might help 
implementers, per
this would be a "first" or "leftmost" AS segment in the AS_PATH for the 
source
IP prefix in the BGP Loc-RIB that contains the source IP prefix, while 
above it's
the destination prefix, etc..

>
> Data Type Semantics: identifier
>
> ElementId: 129
>
> Status: current
>
> Reference: See RFC 1771 for a description of BGB-4 and see RFC 1930 a
>    definition of the AS number.

Also, in addition to accounting for AS_SETs, we should account for 
AS_CONFED_*
segments as well.

Same as above..

-danny


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr 28 03:03:39 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA14288
	for <ipfix-archive@lists.ietf.org>; Thu, 28 Apr 2005 03:03:39 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DR2uO-0007Ly-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 28 Apr 2005 01:54:00 -0500
Received: from smtp0.netlab.nec.de ([195.37.70.40])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DR2uM-0007Lt-00
	for ipfix-info@net.doit.wisc.edu; Thu, 28 Apr 2005 01:53:59 -0500
Received: from europa.office (europa.office [10.1.1.2])
	by smtp0.netlab.nec.de (Postfix) with ESMTP id 8730015121
	for <ipfix-info@net.doit.wisc.edu>; Thu, 28 Apr 2005 08:57:34 +0200 (CEST)
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Subject: [ipfix-info] OctetCount Information Elements
Date: Thu, 28 Apr 2005 08:53:57 +0200
Content-Type: multipart/signed;
	protocol="application/x-pkcs7-signature";
	micalg=SHA1;
	boundary="----=_NextPart_000_0000_01C54BCF.D010E9D0"
Message-ID: <88F766D04E6AF3409B39E60D7D933EB23123@europa.office>
X-MS-Has-Attach: yes
Thread-Topic: OctetCount Information Elements
Thread-Index: AcVLvwwyU0ykl+wZQYOHcqI5zTf61Q==
From: "Thomas Dietz" <Thomas.Dietz@netlab.nec.de>
To: <ipfix-info@net.doit.wisc.edu>
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0000_01C54BCF.D010E9D0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

Dear all,

I'm just writing a little ipfix prototype implementation and found that the
definition of the exportedOctetTotalCount, droppedOctetTotalCount etc.
Information Elements is not clear to me. Does this number include protocol
headers, if yes which (L2, L3...), does it refer to the number of octets
transfered on the wire?? What does it really count?

Thanks in advance for the clarification,

Thomas

-- 
Thomas Dietz                       E-mail: Thomas.Dietz@netlab.nec.de
Network Laboratories               Phone:  +49 6221 90511-28
NEC Europe Ltd.                    Fax:    +49 6221 90511-55
Kurfuersten-Anlage 36
69115 Heidelberg, Germany          http://www.netlab.nec.de
 

------=_NextPart_000_0000_01C54BCF.D010E9D0
Content-Type: application/x-pkcs7-signature;
	name="smime.p7s"
Content-Disposition: attachment;
	filename="smime.p7s"
Content-Transfer-Encoding: base64
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------=_NextPart_000_0000_01C54BCF.D010E9D0--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr 28 15:37:23 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA18642
	for <ipfix-archive@lists.ietf.org>; Thu, 28 Apr 2005 15:37:22 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DRESp-0006h5-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 28 Apr 2005 14:14:19 -0500
Received: from mrout3.yahoo.com ([216.145.54.173])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DRESo-0006gy-00
	for ipfix-info@net.doit.wisc.edu; Thu, 28 Apr 2005 14:14:18 -0500
Received: from [66.228.162.78] (snapdragon.corp.yahoo.com [66.228.162.78])
	by mrout3.yahoo.com (8.13.4/8.13.4/y.out) with ESMTP id j3SJDX2n082444;
	Thu, 28 Apr 2005 12:13:34 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; s=serpent; d=yahoo-inc.com; c=nofws; q=dns;
	h=message-id:date:from:user-agent:x-accept-language:
	mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding;
	b=eaJ5HbG/HDsV5+8sUePIP+zxZHFmb3MEF5t78AUDH+Wwjppx+VQ0a27ur3JevWcQ
Message-ID: <427135DD.50207@yahoo-inc.com>
Date: Thu, 28 Apr 2005 12:13:33 -0700
From: Eric Ji <eji@yahoo-inc.com>
User-Agent: Mozilla Thunderbird 0.9 (X11/20041116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Danny McPherson <danny@tcb.net>
CC: ipfix-info@net.doit.wisc.edu
Subject: Re: [ipfix-info] BGP related Information Elements
References: <426E5295.8080602@cisco.com> <426E7E9D.90609@yahoo-inc.com> <426FBA65.5030304@cisco.com> <426FE084.7000306@yahoo-inc.com> <000e613ec6d01630412189fd63a69e7a@tcb.net>
In-Reply-To: <000e613ec6d01630412189fd63a69e7a@tcb.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit

Hi Danny,

Except your harsh words that I simply ignore, is there any difference 
from my original concerns? the AS fields in ipfix-info draft are 
unsigned16 identifiers, how to report AS_SET etc still needs be 
discussed and resolved. 'Reporting multiple AS values', or 'perhaps 
count this and that', remember we are not writing an application only 
for the use of ourselves, in which case you could do anything no one cares.

Again, I dont want to see this maillist to become a place where you can 
bark others as 'you really dont know this and that', sth like that. You 
can go to online forums if you like that way before you make any 
discussions. To address your question, yes, I used to work on developing 
two bgp stacks, and yes, I am working on sth else now and haven't 
touched bgp for a while.

Regards,
Eric


Danny McPherson wrote:
>> -----
>> comments:
>> I think we need look more into this. Current issues:
>> (1) the next AS may not necessarily be different, it's not uncommon to 
>> loop AS, i.e, repeat AS in ASpath to make it less preferable in the 
>> routing calculation. Juniper has option to control that.
> 
> 
> The local AS is never added to the AS_PATH until the route is
> advertised to an external BGP peer (or BGP confederation peer).
> Padding (i.e., typically prepending only occurs on route advertisement
> to an external BGP peer).  There are some hacks for this but I
> don't believe IPFIX should attempt to accommodate those corner
> cases.
> 
>> (2) For AS_SEQUENCE, it's ok. But for AS_SET, since multiple ASes are 
>> combined together into a SET, no single AS stands out as the 'peerAS' 
>> per definition.
>> My tentative propose is a change to your definition above:
>> The autonomous system (AS) number of the next AS in the AS path, which 
>> is different from local AS, to which packets of this flow are forwarded.
> 
> 
> You really don't know whether packets are actually going to be forwarded
> along that path (I know, rathole), all that this is really reporting is 
> that
> the peerAS value represents that of the leftmost AS path segment in the
> AS_PATH for the best BGP route associated with the destination prefix 
> (i.e.,
> the BGP Loc-RIB entry).
> 
> Indeed, if the leftmost (first) path segment in the AS_PATH contains an
> AS_SET, multiple AS values could be returned.  We should account for that
> condition.
> 
> Finally, while not the case with route reflection, we should perhaps
> account for AS_CONFED_SET and AS_CONFED_SEQUENCE in the AS_PATH.
> -danny
> 
> 
> 
> 
> 
> 
> -- 
> Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message 
> body
> Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
> "unsubscribe ipfix" in message body
> Archive     http://ipfix.doit.wisc.edu/archive/
> 
> 
> 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr 28 16:04:32 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA20465
	for <ipfix-archive@lists.ietf.org>; Thu, 28 Apr 2005 16:04:32 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DRF0L-000058-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 28 Apr 2005 14:48:57 -0500
Received: from dog.tcb.net ([64.78.150.133])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DRF0K-000051-00
	for ipfix-info@net.doit.wisc.edu; Thu, 28 Apr 2005 14:48:56 -0500
Received: from [64.134.126.243] (dhcp64-134-126-243.sjcc.sjc.wayport.net [64.134.126.243])
	(using TLSv1 with cipher RC4-SHA (128/128 bits))
	(No client certificate requested)
	by dog.tcb.net (Postfix) with ESMTP id 56C49645DD;
	Thu, 28 Apr 2005 13:49:35 -0600 (MDT)
In-Reply-To: <427135DD.50207@yahoo-inc.com>
References: <426E5295.8080602@cisco.com> <426E7E9D.90609@yahoo-inc.com> <426FBA65.5030304@cisco.com> <426FE084.7000306@yahoo-inc.com> <000e613ec6d01630412189fd63a69e7a@tcb.net> <427135DD.50207@yahoo-inc.com>
Mime-Version: 1.0 (Apple Message framework v622)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <bea5d504a9c363942f48d844a9e8bef6@tcb.net>
Content-Transfer-Encoding: 7bit
Cc: ipfix-info@net.doit.wisc.edu
From: Danny McPherson <danny@tcb.net>
Subject: Re: [ipfix-info] BGP related Information Elements
Date: Thu, 28 Apr 2005 13:48:43 -0600
To: Eric Ji <eji@yahoo-inc.com>
X-Mailer: Apple Mail (2.622)
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit


On Apr 28, 2005, at 1:13 PM, Eric Ji wrote:
>
> Except your harsh words that I simply ignore, is there any difference 
> from my original concerns?

Nope, I believe we were in agreement (not sure what you found harsh 
about
my message).  As a matter of fact, I thought pointing out that an AS_AET
could be returned was quite a keen observation.  The only additional 
points
I had were:

o the local AS segment isn't in the path until the route is
advertised to an external BGP peer

o AS_CONFED_* should be considered as well

o the "leftmost" or "first" AS segment is likely more intuitive 
terminology

o and I didn't quite understand what point there was in IPFIX reporting
here what the value of a recursive lookup for the origin AS value of
the BGP NEXT_HOP IP address.

> the AS fields in ipfix-info draft are unsigned16 identifiers, how to 
> report AS_SET etc still needs be discussed and resolved. 'Reporting 
> multiple AS values', or 'perhaps count this and that', remember we are 
> not writing an application only for the use of ourselves, in which 
> case you could do anything no one cares.

Indeed, I know this quite well :-)

> Again, I dont want to see this maillist to become a place where you 
> can bark others as 'you really dont know this and that', sth like 
> that.

Heh, I didn't think I was barking .. I'm typically the last one to bark 
about
something on a mailing list.  Though I've been lurking here forever I 
rarely
chime in..

>  You can go to online forums if you like that way before you make any 
> discussions. To address your question, yes, I used to work on 
> developing two bgp stacks, and yes, I am working on sth else now and 
> haven't touched bgp for a while.

I never asked for your qualifications, and honestly don't care.  The 
AS_SET
observation was quite keen.

Perhaps you should reread my message with a less sensitive hat on :-)

-danny


--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From majordomo@mil.doit.wisc.edu  Thu Apr 28 17:37:43 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA27236
	for <ipfix-archive@lists.ietf.org>; Thu, 28 Apr 2005 17:37:43 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DRGaF-0003IO-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 28 Apr 2005 16:30:07 -0500
Received: from mrout2-b.corp.dcn.yahoo.com ([216.109.112.28])
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DRGaE-0003IH-00
	for ipfix-info@net.doit.wisc.edu; Thu, 28 Apr 2005 16:30:06 -0500
Received: from [66.228.162.78] (snapdragon.corp.yahoo.com [66.228.162.78])
	by mrout2-b.corp.dcn.yahoo.com (8.13.4/8.13.4/y.out) with ESMTP id j3SLTtmV082258;
	Thu, 28 Apr 2005 14:29:55 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; s=serpent; d=yahoo-inc.com; c=nofws; q=dns;
	h=message-id:date:from:user-agent:x-accept-language:
	mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding;
	b=SWdv5w9y13Md44FEeyDqrMJJEbZMGJ/zZVCN7kHas+wZqM3VSXT55CKA74pScE0b
Message-ID: <427155D2.8070809@yahoo-inc.com>
Date: Thu, 28 Apr 2005 14:29:54 -0700
From: Eric Ji <eji@yahoo-inc.com>
User-Agent: Mozilla Thunderbird 0.9 (X11/20041116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Danny McPherson <danny@tcb.net>
CC: ipfix-info@net.doit.wisc.edu
Subject: Re: [ipfix-info] BGP related Information Elements
References: <426E5295.8080602@cisco.com> <426E7E9D.90609@yahoo-inc.com> <426FBA65.5030304@cisco.com> <426FE084.7000306@yahoo-inc.com> <000e613ec6d01630412189fd63a69e7a@tcb.net> <427135DD.50207@yahoo-inc.com> <bea5d504a9c363942f48d844a9e8bef6@tcb.net>
In-Reply-To: <bea5d504a9c363942f48d844a9e8bef6@tcb.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>
Content-Transfer-Encoding: 7bit


As said in personal email exchanges with Danny, I think I over-acted in 
my previous email. Sorry for that Danny.

Danny McPherson wrote:
> 
> On Apr 28, 2005, at 1:13 PM, Eric Ji wrote:
> 
>>
>> Except your harsh words that I simply ignore, is there any difference 
>> from my original concerns?
> 
> 
> Nope, I believe we were in agreement (not sure what you found harsh about
> my message).  As a matter of fact, I thought pointing out that an AS_AET
> could be returned was quite a keen observation.  The only additional points
> I had were:
> 
> o the local AS segment isn't in the path until the route is
> advertised to an external BGP peer
 >
> o AS_CONFED_* should be considered as well
---
agree on both.
> 
> o the "leftmost" or "first" AS segment is likely more intuitive terminology
> 
> o and I didn't quite understand what point there was in IPFIX reporting
> here what the value of a recursive lookup for the origin AS value of
> the BGP NEXT_HOP IP address.
---
agree, as said, we may not mention nexthop, just rely on the ASpath to 
figure out peerAS.

>> the AS fields in ipfix-info draft are unsigned16 identifiers, how to 
>> report AS_SET etc still needs be discussed and resolved. 'Reporting 
>> multiple AS values', or 'perhaps count this and that', remember we are 
>> not writing an application only for the use of ourselves, in which 
>> case you could do anything no one cares.
> 
> 
> Indeed, I know this quite well :-)
---
Yeah, hope this can be addressed. Use other method to figure out,
or report as 0 which means user needs figure out by themselves, or 
report multiple AS and change AS field definition?


>> Again, I dont want to see this maillist to become a place where you 
>> can bark others as 'you really dont know this and that', sth like that.
> 
> 
> Heh, I didn't think I was barking .. I'm typically the last one to bark 
> about
> something on a mailing list.  Though I've been lurking here forever I 
> rarely
> chime in..
> 
>>  You can go to online forums if you like that way before you make any 
>> discussions. To address your question, yes, I used to work on 
>> developing two bgp stacks, and yes, I am working on sth else now and 
>> haven't touched bgp for a while.
> 
> 
> I never asked for your qualifications, and honestly don't care.  The AS_SET
> observation was quite keen.
> 
> Perhaps you should reread my message with a less sensitive hat on :-)
> 
> -danny
> 
> 
> 

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Valen8648@jedi.com  Thu Apr 28 23:18:39 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA22578
	for <ipfix-archive@lists.ietf.org>; Thu, 28 Apr 2005 23:18:39 -0400 (EDT)
Received: from [221.167.16.185] (helo=jedi.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DRLuq-00061i-00
	for ipfix-list@mil.doit.wisc.edu; Thu, 28 Apr 2005 22:11:44 -0500
From: "Freyr Valentine" <Valen8648@jedi.com>
To: "Brava Hayes" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: VlAGGRA WALLIUM Ci-alis
Date: Thu, 28 Apr 2005 23:11:36 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C54A95.4271B3F8"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DRLuq-00061i-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C54A95.4271B3F8
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

It's not above a quarter of a mile to the headland yonder, and w
mistake when he handed me the commission which the Secretary of

the dowry, you will not consider it unreasonable that I forget to
Slowly, faintly, the colour crept back into that ashen face.  The
amiable familiarity he used, Lord Julian slipped an arm through o
had bethought him of his younger brother, a soldier at home
That with his own hands he should do that which most men of his
beach-combers, English, French, and Dutch, became a dignified,
They do not wish to see account-books.  Few of them can read.
glances of those fierce eyes.  Instinct warned him that his life 
the agreed share.  Withdrawal from a position of that kind is eve
I must have known then, if I had not already learnt it, that I ha
Bishop just issuing from the shed.  He doffed his hat and stood
Briefly on that he told it her.


Have a nice day.
------=_NextPart_000_0008_01C54A95.4271B3F8
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Would you like to spend  less on your  =
MEDlC&Aacute;Tl&Otilde;NS?<BR><BR><A=20
href=3D"http://www.jc.oso.seeifingerpri.com">=
Vl&Aacute;GR&Agrave; V&Atilde;Ll&Ucirc;M C&Icirc;&Agrave;LlS</A> and many=20
other.<BR></FONT><FONT face=3DArial size=3D2></FONT><BR><FONT =
face=3DArial size=3D3>Have=20
a nice day.</FONT></DIV></BODY></HTML>

------=_NextPart_000_0008_01C54A95.4271B3F8--



From majordomo@mil.doit.wisc.edu  Fri Apr 29 18:13:27 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA21902
	for <ipfix-archive@lists.ietf.org>; Fri, 29 Apr 2005 18:13:26 -0400 (EDT)
Received: from majordomo by mil.doit.wisc.edu with local (Exim 3.13 #1)
	id 1DRdJf-0001gm-00
	for ipfix-list@mil.doit.wisc.edu; Fri, 29 Apr 2005 16:46:31 -0500
Received: from weird-brew.cisco.com ([144.254.15.118] helo=av-tac-bru.cisco.com)
	by mil.doit.wisc.edu with esmtp (Exim 3.13 #1)
	id 1DRdJd-0001gC-00
	for ipfix-protocol@net.doit.wisc.edu; Fri, 29 Apr 2005 16:46:29 -0500
X-TACSUNS: Virus Scanned
Received: from strange-brew.cisco.com (localhost [127.0.0.1])
	by av-tac-bru.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3TLkSY03730
	for <ipfix-protocol@net.doit.wisc.edu>; Fri, 29 Apr 2005 23:46:28 +0200 (CEST)
Received: from [10.61.64.155] (ams-clip-vpn-dhcp155.cisco.com [10.61.64.155])
	by strange-brew.cisco.com (8.11.7p1+Sun/8.11.7) with ESMTP id j3TLkRK19608
	for <ipfix-protocol@net.doit.wisc.edu>; Fri, 29 Apr 2005 23:46:27 +0200 (CEST)
Message-ID: <4272AB33.9040809@cisco.com>
Date: Fri, 29 Apr 2005 23:46:27 +0200
From: Benoit Claise <bclaise@cisco.com>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: ipfix-protocol@net.doit.wisc.edu
Subject: [ipfix-protocol] new version of the IPFIX protocol draft:draft-ietf-ipfix-protocol-13.txt
Content-Type: multipart/alternative;
 boundary="------------020802030308020805060409"
Precedence: bulk
Sender: majordomo listserver <majordomo@mil.doit.wisc.edu>

This is a multi-part message in MIME format.
--------------020802030308020805060409
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Dear all,

I just posted a new version of the IPFIX protocol draft.

Changes:
- corrected the issues 
http://ietf.levkowetz.com/drafts/ipfix/protocol/draft-ietf-ipfix-protocol-12.nits.txt
- updated the references
- one or two editorial improvements.

I really hope this is the last version.

Regards, Benoit

--------------020802030308020805060409
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
Dear all, <br>
<br>
I just posted a new version of the IPFIX protocol draft.<br>
<br>
Changes:<br>
- corrected the issues
<a class="moz-txt-link-freetext" href="http://ietf.levkowetz.com/drafts/ipfix/protocol/draft-ietf-ipfix-protocol-12.nits.txt">http://ietf.levkowetz.com/drafts/ipfix/protocol/draft-ietf-ipfix-protocol-12.nits.txt</a><br>
- updated the references<br>
- one or two editorial improvements.<br>
<br>
I really hope this is the last version.<br>
<br>
Regards, Benoit<br>
</body>
</html>

--------------020802030308020805060409--

--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe ipfix" in message body
Archive     http://ipfix.doit.wisc.edu/archive/


From Estra@jjjnet.com  Sat Apr 30 15:50:46 2005
Received: from mil.doit.wisc.edu (mil.doit.wisc.edu [128.104.31.31])
	by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA29052
	for <ipfix-archive@lists.ietf.org>; Sat, 30 Apr 2005 15:50:45 -0400 (EDT)
Received: from [64.237.132.245] (helo=jjjnet.com)
	by mil.doit.wisc.edu with smtp (Exim 3.13 #1)
	id 1DRxdh-0002HE-00
	for ipfix-list@mil.doit.wisc.edu; Sat, 30 Apr 2005 14:28:34 -0500
From: "Helfried Estrada" <Estra@jjjnet.com>
To: "Llywellyn Conrad" <ipfix-list@mil.doit.wisc.edu>
Subject: Re: Medicaations 50-CTO
Date: Sat, 30 Apr 2005 15:28:24 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0008_01C54DA5.4273EA68"
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-Id: <E1DRxdh-0002HE-00@mil.doit.wisc.edu>

This is a multi-part message in MIME format.

------=_NextPart_000_0008_01C54DA5.4273EA68
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hello, 

occupation his lordship could have no possible suspicion.  With t
of this they sped on to pick up the three boats that were standin

with his title and position, his personal grace and the charm of 
The Arabella was advancing now along a course which, if continued
By the Saints!  Ye're a bold man, Don Francisco, to come to me
To taste palatable Christian food after months of salt fish and m
this war shall be carried into the New World.  A fleet is coming
The boats pulled away from the shore, with their loads of laughin
fire and metal burst upon him from the buccaneers, and his decks

sister's honour is in pawn to me.  Should you forget to return wi


On the quarter deck, towards which an overwhelming wave of buccan


Have a nice day.
------=_NextPart_000_0008_01C54DA5.4273EA68
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D3>Hello, =
Do you want to spend  LESS on your medications?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D4>Visit <FONT face=3DArial =
size=3D4><A href=3D"http://www.ub.vih.sanitizethare.com">=
PharmacyByMail SH0P</A></FONT> and SAVE=20
Over 70%</FONT></DIV>
<DIV>
<TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0>
  <TBODY>
  <TR vAlign=3Dbottom>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>V</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>GR</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>UM&nbsp;C</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>lS</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
    <TD rowSpan=3D2><FONT face=3DArial size=3D4>NA</FONT></TD>
    <TD><FONT face=3DArial size=3D4></FONT></TD>
  <TR>
    <TD><FONT face=3DArial size=3D4>lA</FONT></TD>
    <TD><FONT face=3DArial size=3D4>A&nbsp;VALl</FONT></TD>
    <TD><FONT face=3DArial size=3D4>lAL</FONT></TD>
    <TD><FONT face=3DArial size=3D4>&nbsp;XA</FONT></TD>
    <TD><FONT face=3DArial =
size=3D4>X&nbsp;and&nbsp;many&nbsp;other</FONT></TD>
</TR></TBODY></TABLE></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial =
size=3D3>Try us and you will NOT BE DllSAPPOlNTED!.</FONT></DIV>
<DIV><FONT face=3DArial size=3D3>Have a Nice Day.</FONT></DIV>
<DIV><FONT face=3DArial size=3D3></FONT>&nbsp;</DIV></BODY></HTML>

------=_NextPart_000_0008_01C54DA5.4273EA68--



