Hi Folks,

I've gotten some review feedback and am doing a grand scrub through
syslog-syslog-04.  Very early on, someone told me that they had seen
some implementations that have a space character between the <PRI> 
and the TIMESTAMP.  I've looked through some snips of code and
have generated messages from several devices.  Those that do have
a real TIMESTAMP just start that immediately after the ">".  Some
devices that don't have a valid TIMESTAMP will sometimes place a
space or other character after the ">".  

Unless someone objects, I'm going to change what is written in 
syslog-syslog to remove the reference to the "optional space after
the PRI field".  From what I've seen, syslogd is always looking
for strftime in the format of "%h %e %T " immediately after the ">".

Your comments and thoughts appreciated.

Thanks,
Chris
(replying to this will go to the list)
(send to [EMAIL PROTECTED] for separate replies)

Reply via email to