API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 6872
[ACTIVE]

The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model

Metadata

Publisher
IETF
Doc Type
Standard
Pages
39
Abstract
Well-known web servers such as Apache and web proxies like Squid support event logging using a common log format. The logs produced using these de facto standard formats are invaluable to system administrators for troubleshooting a server and tool writers to craft tools that mine the log files and produce reports and trends. Furthermore, these log files can also be used to train anomaly detection systems and feed events into a security event management system. The Session Initiation Protocol (SIP) does not have a common log format, and, as a result, each server supports a distinct log format that makes it unnecessarily complex to produce tools to do trend analysis and security detection. This document describes a framework, including requirements and analysis of existing approaches, and specifies an information model for development of a SIP common log file format that can be used uniformly by user agents, proxies, registrars, and redirect servers as well as back-to-back user agents.
Publication Date
2013-02-01
Status Note
Proposed Standard
DOI
10.17487/RFC6872
Link
https://doi.org/10.17487/RFC6872
Author(s)
Vijay K. Gurbani
Eric Burger
Tricha Anjali
Humberto Abdelnur
Olivier Festor
Keyword(s)
Logging, Analytics
Latest version of IETF RFC 6872

Document Versions — IETF RFC 6872

  • ▶ IETF RFC 6872 (2013-02-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • Rieck, K., Wahl, S., Laskov, P., Domschitz, P., and K-R. Muller, "A Self-learning System for Detection of Anomalous SIP Messages", Principles, Systems and Applications of IP Telecommunications Services and Security for Next Generation Networks (IPTComm), LNCS 5310, pp. 90-106, 2008. EXTERNAL
  • Schneier, B. and J. Kelsey, "Secure audit logs to support computer forensics", ACM Transactions on Information and System Security (TISSEC), 2(2), pp. 159,176, May 1999. EXTERNAL
  • IETF RFC 4253 [Active*]
  • IETF RFC 5101 [Superseded*]
  • IETF RFC 5246 [Superseded*]
  • IETF RFC 5424 [Active*]
  • RFC6873 — RFC6873 EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6872.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 6872, The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model. Available at https://doi.org/10.17487/RFC6872
Snippet:
IETF RFC 6872, The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model. Available at https://doi.org/10.17487/RFC6872

HTML (ISO 690 compliant)

Preview:
IETF RFC 6872, The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model. Available at https://doi.org/10.17487/RFC6872
Snippet:
<span class="citation"><cite>IETF RFC 6872</cite>, The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model. Available at <a href="https://doi.org/10.17487/RFC6872" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6872</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 6872, The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model
doi: 10.17487/RFC6872
url: https://doi.org/10.17487/RFC6872
Snippet:
<li>
<cite id="bib-rfc6872">IETF RFC 6872</cite>, The Common Log Format (CLF) for the Session Initiation Protocol (SIP): Framework and Information Model
<span class="doi">10.17487/RFC6872</span>
</li>

Referenced By