Hi Folks, I've just reviewed syslog-sign-05. I'm getting pretty happy.
I think that there is one grammar/usage thing that should be corrected: ================================================================================== 2. Required syslog Format The essential format of syslog messages is defined in RFC 3164. The basis of the format is that anything delivered to UDP port 514 MUST be accepted as a valid syslog message. However, there is a RECOMMENDED format laid out in that work this work REQUIRES adherence to specific fields. Packets conforming to this specification will REQUIRE this format. ------------------------------------------------------------------------ Perhaps should be: ------------------------------------------------------------------------ 2. Required syslog Format The essential format of syslog messages is defined in RFC 3164. The basis of the format is that anything delivered to UDP port 514 MUST be accepted as a valid syslog message. However, there is a RECOMMENDED format laid out in that work which this work REQUIRES. Packets conforming to this specification will REQUIRE this format. ================================================================================== I also think that there are two clarification points which need to be made: ================================================================================== 3.1. syslog Packets Containing a Signature Block Signature block messages MUST be completely formed syslog messages. Signature block messages have PRI, HEADER, and MSG parts as described in Sections 4.1.1 and 4.1.3 of [RFC3164]. The PRI part MUST have a valid Priority value bounded by angled brackets. The HEADER part MUST have a valid TIMESTAMP field as well as a HOSTNAME field. It SHOULD also contain a valid TAG field. It is RECOMMENDED that the TAG field have the value of "syslog " (without the double quotes) to signify that this message was generated by the syslog process. The CONTENT field of the syslog signature block messages have the following fields. ------------------------------------------------------------------------ Perhaps the following sentence should be appended: " Each of these fields are separated by a single space character." ------------------------------------------------------------------------ Again, that sentence, or something similar should appear in Section 4. ================================================================================== More comments welcome. If no significant discussion items arise in the next week, I'd like to put the draft into WG Last Call for 2 weeks. After that time, I'd like to submit it to the ADs for consideration. Thanks, Chris [Replying to this will go to the list.] [Please use [EMAIL PROTECTED] to ] [reply to me separately. ]
