On Fri, Jan 16, 2015 at 06:17:01PM +0800, Dongsheng Song wrote: > On Fri, Jan 16, 2015 at 8:46 AM, Alexander Bluhm > <alexander.bl...@gmx.net> wrote: > > > > - Wrong format. The TLS RFC requires length-message encoding, I > > use message-newline inherited from TCP. > > Transmission of Syslog Messages over TCP (RFC 6587) prefer use > 'octet-counting', not 'non-transparent-framing method'. > > http://tools.ietf.org/html/rfc6587#section-3.4 > The older method of non-transparent-framing has problems. The newer > method of octet-counting is reliable and has not been seen to cause > problems noted with the non-transparent-framing method.
I know. Implementing and testing non-transparent-framing was easier. My goal was to get TCP, TLS and events working first. Changing the format can be done later. > I'd like plain TCP transmission implement 'octet-counting' too. There will be only one way for TCP and TLS as this code is shared. In the end it will be octet-counting. bluhm