On Fri Oct 22 09:34 1999 -0400, Chris Calabrese wrote: > If we're going to give up the current syslog priorities, I'd go with the > 0..256, but with documented/standard mappings between this and the > existing syslog (debug,info,notice,warning,err,crit,alert,emerg) and SNMP > (normal,warning,minor,major,critical) priorities. Yes, that sounds quite reasonable. > Program names are only needed by humans, but process ID's can be used > programmatically to pull out one thread of execution from the logs and > need to be a stand-alone data element to do this usefully. For example, > we've got a heavily used FTP server, and sometimes want to pull out one > FTP "session" from the logs when we suspect something fishy or to help > debug problems people are having. We currently rely on the 'ftpd[<PID>]' > format that's in the logs, but it would be nice if this were > standardized. If you go with a meta-tagging approach, then you can get > the program name for free too. Something like > auth="jafkdsjf7df8743j" orig=ftp.somewhere.com \ > ts=19991022093222 tz=EDT5EST pri=27 fac=net/ftp pid="xxx" \ > pn="ftpd" src=127.0.0.1 dst=127.0.0.1 msg="CWD /pub" Hrmmm. While I'm still a bit skeptical of the practical value of the pid, I agree that meta-tags in general could be quite useful, and it certainly wouldn't hurt to have one for the pid if we're supporting them anyway. So I'll agree with this. > Oops, left that out. I meant to include guaranteed delivery as one of the > optional services. Yes, this is closely related to QOS, however, as you > may decide that you need guaranteed delivery for pri>=128, but not for > lower, or some such. I'm thinking back to my grad school days when > working on real-time stuff here. Yes, guarunteed delivery should be optional, and I'll add that the option should be independantly selectable. Usually, the application generating the message is in the best position to determine if it's really critical that the message not be dropped, and that may or may not have anything to do with the priority (to use your example). -- Mark D. Roth <[EMAIL PROTECTED]> http://www.feep.net/~roth/
