While not technically related to rsyslogd, I figured this might be the
best (only?) place to mention this. I just noticed the following message
being sent by Mac OS X 10.6.8 [1] (raw value):
<198>Jul 12 15:19:13 marvin launchproxy[1243]:
/usr/libexec/sshd-keygen-wrapper: Connection from: 192.168.1.10 on port: 33247
It's fine, except that the PRI value is an invalid value---it should be
between 0 and 191 inclusive. Broken down, this is LOG_USER8(?)/LOG_INFO and
is otherwise a nicely formatted syslog message.
Since I don't use rsyslogd [2], my first question is: how does rsyslogd
deal with such an entry, and my second question is: what is Apple doing
here with a non-valid PRI value?
-spc (More curious than anything ... )
[1] A right pain to setup forwarding of syslog messages under Mac OS X.
At least Apple appears to have stopped overwriting local changes on
updates now.
[2] I wrote my own syslog daemon and this entry revealed a bug---not a
show stopping bug, but a bug nontheless.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
