Glenn,
OK, it looks like we get to the root of the issue: our understanding of
facility is fundamentally different.
You assume that facility is indeed a semantic entity that uniquely
identifies an originator (that part of the system, that originally
generates the MSG content).
I do not
Glenn
I can define two layers in the ABNF (one that generates MSG and one that
generates SYSLOG-MSG) but SYSLOG-MSG is not ready to go on the wire so a third
layer is needed, ie a transport, which is worth a mention in -protocol even if
it is not defined there. So two layers in the ABNF, two in