Andrew, That's exactly our experience. 100% same story...
Rainer > -----Original Message----- > From: Andrew Ross [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 24, 2005 11:20 PM > To: Rainer Gerhards > Cc: [EMAIL PROTECTED] > Subject: RE: [Syslog] New direction and proposed charter > > > Rainer, > > I agree that 3164 is only really valid with respect to the > <PRI>. When we > implemented it in Kiwi Syslog we found no device actually > used the 3164 > format exactly. Sometimes the hostname was there, sometimes > not. Having to > write parsing code to work out if a hostname was actually a > TAG or not was a > huge processing overhead. We now disable 3164 parsing by default. > > Cheers > > Andrew > > > _______________________________________________ Syslog mailing list Syslog@lists.ietf.org https://www1.ietf.org/mailman/listinfo/syslog