Giles Lean <[EMAIL PROTECTED]> writes:
> syslogd is not quality software. There are various efforts underway to
> write replacements, including of course Dan's tools. People committed
> to syslog() style interfaces might want to look at:
> http://www.ietf.org/ietf/99nov/syslog-agenda-99nov.txt
I subscribed to that working group when it first started, but then most of
the active participants became very enamored with sending syslog messages
on the wire in XML and using YYYYMMDD HHMMSS.mmm sorts of timestamps as
part of the wire protocol. Use of human-readable timestamps on the wire
was deemed in some of the discussions to require less processing.
*shrug* Maybe I'm missing the obvious advantages of this sort of
approach, but it struck me extremely wrong and I'm not sure I'll want to
use anything they come up with if they stick to that same approach.
--
Russ Allbery ([EMAIL PROTECTED]) <URL:http://www.eyrie.org/~eagle/>