On 03/06/2015 01:15 PM, Botond Botyanszki wrote:
> The first date is the syslog header. As per RFC3164 it should have a
> single digit date:
> "If the day of the month is less
> than 10, then it MUST be represented as a space and then the
> number. For example, the 7th day of August would be
>
On 03/06/2015 01:15 PM, Botond Botyanszki wrote:
> Probably many syslog implementations are able to parse it with double
> digits but to not break standards compliance you should be only replacing
> the second, i.e. the value in snare timestamp field.
I just came across this thread and am taking a