My preference would be to keep structured data before MSG. This way, it can effectively be treated as an "extended header". --- Alex
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Reed Sent: Tuesday, November 22, 2005 8:51 AM To: Rainer Gerhards Cc: [EMAIL PROTECTED] Subject: Re: [Syslog] New direction and proposed charter > WG, > <PRI>VERSION TIMESTAMP HOSTNAME APP-NAME PROCID [SD-ID]s MSG I would put the SD-IDs after the message. The SD-IDs and detailed bits of meaning to the MSG and without the MSG, are irrelevant. The exception being a language marker. > - replace NUL with an escape sequence upon reception (e.g. <00>) Why not \0 ? Darren _______________________________________________ Syslog mailing list Syslog@lists.ietf.org https://www1.ietf.org/mailman/listinfo/syslog _______________________________________________ Syslog mailing list Syslog@lists.ietf.org https://www1.ietf.org/mailman/listinfo/syslog