RE: Fragmentation terminology

2004-02-13 Thread Rainer Gerhards
Anton, very reasonable ;) I think multi-part is a good term. OK, it triggers MIME in my head, but I think every term used to split up a message into multipe parts/fragments/segemnts/whatever is already used in some other context. As we don't do MIME in syslog, multi-part should cause the least

-procotol relay operations

2004-02-13 Thread Rainer Gerhards
Hi WG, we talked quite a bit about different MTUs for different transport mapping. We may run into a situation where a message is larger than is actually supported by the transport (e.g a hypothetical SNMP trap transport supporting only ~500 octets). As we have multi-part message in -protocol, a

RE: RFC 3339 UTC offset

2004-02-13 Thread Rainer Gerhards
I have gone through all of the good posts on this issue. I have the feeling that we currently have the following status: - some people argue that a synced/I know my TZ indicator for the timestmap has advantages in the real world - some people argue that a synced/I know my TZ indicator for the

RE: RFC 3339 UTC offset

2004-02-13 Thread Anton Okmianski
Rainer: In the light of this sum-up, I propose the following compromise: - we will continue to use the rfc 3339 timestamp in its unmodified way - we will ignore that RFC 3339 calls for timesync (because we can't ensure it) - there will be NO header field indicating the reliability