Subject: Re: Audit & Events

From: Tom-PT Taylor <[email-masked]>
Date: Mon, 23 Oct 2000 14:21:16 -0400

Answers interspersed below.

> -----Original Message-----
> From: Isabelle Cnudde [mailto:[email-masked]]
> Sent: Thursday, October 12, 2000 11:48 AM
> To: [email-masked]
> Subject: Audit & Events
>
>
> Hi,
>
> Could someone explain me what are the difference between all the
> *event* descriptors? and what should be returned to the commands
> AuditCapabilities and AuditValue?
> Here is my understanding and open points:
>
> EventsDescriptor
> ----------------
> . AuditCapabilities
> Return the list of possible events on the Termination together with
> the list of all possible values for the EventsDescriptor Parameters.
> . AuditValue
> What should be returned?
[PTT] The current value of the EventsDescriptor (i.e.) the latest value of
the descriptor as set by the the MGC.

>
> ObservedEventsDescriptor
> ------------------------
> . AuditCapabilities
> Return the names of active events on the termination.
> What is an "active event"?
> Is that a list of events that has to be observed on a termination?
[PTT] Yes.  Note that the entire EventsDescriptor becomes "inactive" in
lockstep reporting mode, after a report has been sent to the MGC.  Note also
that the digitmap completion event becomes inactive after it has been
reported to the MGC.

> . AuditValue
> Returns a list of events in the EventBuffer.
> Is that a list of events that has been observed on a termination?
[PTT] Yes.  Note that events are accumulated in EventBuffer only when event
reporting is operating in lockstep mode.

>
> EventBufferDescriptor
> ---------------------
> . AuditCapabilities
> The appropriate descriptors, with the possible values for the
> Termination are returned from AuditCapabilities.
> What should be returned?
[PTT] Same content as for EventsDescriptor.

> . AuditValue
> Return content of the EventBufferDescriptor = all events that has been
> observed?
[PTT] That's an error which was corrected in draft-ietf-megaco-merged-01.txt
(i.e. H.248 as decided).  The standard now reads "EventBuffer returns the
set of events and associated parameter values currently enabled in the
EventBufferDescriptor."

> Then, what's the difference with the ObservedEventsDescriptor?
>
> Thanks for any clarification on the topic!
> Isabelle
>