Andrew,

That's exactly our experience. 100% same story...

Rainer 

> -----Original Message-----
> From: Andrew Ross [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, November 24, 2005 11:20 PM
> To: Rainer Gerhards
> Cc: [EMAIL PROTECTED]
> Subject: RE: [Syslog] New direction and proposed charter
> 
> 
> Rainer,
> 
> I agree that 3164 is only really valid with respect to the 
> <PRI>. When we
> implemented it in Kiwi Syslog we found no device actually 
> used the 3164
> format exactly. Sometimes the hostname was there, sometimes 
> not. Having to
> write parsing code to work out if a hostname was actually a 
> TAG or not was a
> huge processing overhead. We now disable 3164 parsing by default.
> 
> Cheers
> 
> Andrew
> 
> 
> 

_______________________________________________
Syslog mailing list
Syslog@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/syslog

Reply via email to