RE: syslog-protocol: Cookie Format

2004-01-08 Thread Rainer Gerhards
Hello Anton, first of all, my apologies for the late reply. I wanted to think a little more about your message and then the vacation season got into my way. The plus is that I have some additional references to post. So now let's finally begin with the answer (I am not removing any of your text

RE: syslog-protocol: Cookie Format

2004-01-08 Thread Rainer Gerhards
another message after a too-long vacation season ;) Because I had lots of time to think, this is a LONG message. It's the reply PLUS a suggestion for an -international-00 change in regard to the metadata (formerly cookie) format. I am outling a specific problem and potential solution, so please

Re: syslog-protocol: Cookie Format

2003-12-19 Thread Darren New
Rainer Gerhards wrote: I see the argument. Do you think that relying on something already accepted - like BEEP XML in RFC3080 is a solution? As far as I can see, RFC3080 is increasingly becoming implemented. So while not full XML, it may be a standard that works as expected? I believe that

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Chris Lonvick
Hi Anton, The term cookies was first used by John Kelsey in his first drafts of syslog-sign to denote that the content of the message was somehow special and should be parsed differently. This sounded like a good idea then and Rainer used the same approach when he started thinking about

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Harrington, David
Hi, There is a real demand in the industry for leveraging existing standards rather than creating new languages or special syntaxes. The demand is to reduce the number of special languages an operator needs to learn, and to make it possible to integrate the data from one application type with

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Rainer Gerhards
Hi David and others, There is a real demand in the industry for leveraging existing standards rather than creating new languages or special syntaxes. The demand is to reduce the number of special languages an operator needs to learn, and to make it possible to integrate the data from one

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Rainer Gerhards
Hi David, Let me start about by saying that I am often curmudgeonly, so please forgive any negative tone to this message; I am making the comment to be constructively critical. I have had experience dealing with problems similar to those I find in this proposal, so please pay attention to

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Harrington, David
(or $.01). Thanks, dbh -Original Message- From: Rainer Gerhards [mailto:[EMAIL PROTECTED] Sent: Thursday, December 18, 2003 9:02 AM To: Harrington, David; [EMAIL PROTECTED] Subject: RE: syslog-protocol: Cookie Format Hi David and others, There is a real demand in the industry

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Harrington, David
Hi Rainer, -Original Message- From: Rainer Gerhards [mailto:[EMAIL PROTECTED] I see the argument. Do you think that relying on something already accepted - like BEEP XML in RFC3080 is a solution? As far as I can see, RFC3080 is increasingly becoming implemented. So while not full

RE: syslog-protocol: Cookie Format

2003-12-18 Thread Harrington, David
Hi Rainer, -Original Message- From: Rainer Gerhards [mailto:[EMAIL PROTECTED] I see the argument. Do you think that relying on something already accepted - like BEEP XML in RFC3080 is a solution? As far as I can see, RFC3080 is increasingly becoming implemented. So while not full

RE: syslog-protocol: Cookie Format

2003-12-17 Thread Anton Okmianski
Rainer: Sorry if I did not follow earlier discussion and misunderstand something obvious. But here is my feedback. I like the key=value approach. A lot! This would be hugely welcome in syslog and this is a great undertaking! To begin with, we could plug things like severity and facility because,