again, reply-all... -------- Forwarded Message -------- > From: Balazs Scheidler <[EMAIL PROTECTED]> > To: Darren Reed <[EMAIL PROTECTED]> > Subject: Re: [Syslog] #3 NUL octets, #4 binary data, #8 octet-counting > Date: Thu, 01 Dec 2005 11:02:49 +0100 > > On Wed, 2005-11-30 at 19:47 +1100, Darren Reed wrote: > > > Hi WG, > > > What happens if the message is truncated? > > What value is the message size really providing here? > > If we have a natural EOR marker, LF, what do we need the size for? > > > > Given that a syslog message is a single record, I don't believe that it > > makes any sense to include a "size" parameter. > > The LF (or NL, ASCII #10) marker is natural and I like it, it is used by > syslog-over-TCP implementations. Without agreeing to an explicit message > length SD-ID, I'd like to point out that there are applications that > actually send messages with embedded NL characters in it and I receive > complaints every now and then that syslog-ng splits those to separate > records. One such syslog implementation is log4j a popular Java package. > > In fact I prefer the single NL terminated record format, but there are > minor issues with that which I wanted to point out. > -- Bazsi
_______________________________________________ Syslog mailing list [email protected] https://www1.ietf.org/mailman/listinfo/syslog
