The APP-NAME field definition in RCF 5424 header says that "[i]t is a string 
without further semantics", and the ABNF definition of the field is 
1*48PRINTUSASCII, which to my reading indicates that the space character is 
allowed. The same is true for the field PROCID, which follows APP-NAME: space 
characters seem to be allowed. How can this be allowed, if the values within 
the header are delimited by spaces. It seems like the two value sets for 
APP-NAME and PROCID would be indistinguishable:

++MESSAGE A++
APP-NAME: "cat dog"
PROCID: "rabbit"


++MESSAGE B++
APP-NAME: "cat"
PROCID: "dog rabbit"

Thanks for your consideration,
James Remeika
_______________________________________________
Syslog mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/syslog

Reply via email to