On 2/11/20 1:48 PM, Howard Chu wrote: > Michael Ströder wrote: >> I'm wondering why there are two log lines for listing the search >> parameters for a single search operation: >> >> SRCH base="dc=ae-dir,dc=example,dc=org" scope=2 deref=0 >> filter="(objectClass=aePerson)" >> >> SRCH attr=cn givenName sn mail aeStatus >> >> Is there any rationale for that? > > Because any of DN, filter, or attrs could be too long for a single syslog > message. > On many systems the limit was 1024 characters; using a single log message > resulted > in too many truncated messages.
Oh, I see [1]. Even in 2009 only a SHOULD for 2048 octets was defined while the MUST minimum was _lowered_ to 480 [2]. Ciao, Michael. [1] https://tools.ietf.org/html/rfc3164#section-4.1 [2] https://tools.ietf.org/html/rfc5424#section-6.1
