Hi WG,
I am preparing a large edit on -international which will include all
those good comments into the draft. I will probably raise a number of
questions just so that I can verify my understanding of the discussion.
This is the first of those messages.
I think we have consensus that there are
Rainer Gerhards wrote:
Hi WG,
this is again a request for some assistance/clarification.
I have a situation where an application can act as both a relay as well
as a device in parallel. For example, it accepts incoming syslog
messages and can relay them, but it also generates messages
Rainer:
I think...
1. Fragmented messages should be supported over any transport
including legacy UDP syslog. If you lose some fragments over
unreliable transport, it is expected. A way to determine that this
happened would nice to have. I think even your original proposal
addresses this with