Re: Re[2]: [logs] Logging: World Domination

From: Nick Vargish (navat_private)
Date: Mon Aug 26 2002 - 06:06:07 PDT

  • Next message: Darren Reed: "[logs] Please be aware of syslog-sec IETF group..."

    On Sun, 2002-08-25 at 09:31, Marcus J. Ranum wrote:
    
    > Farg backwards compatibility. A logging system that uses unreliable
    > delivery mechanisms is not worth using.
    
    I completely agree in principle, but in practice there are lots of
    devices out there that only know how to send udp/514 messages. It
    probably won't be practical to upgrade all the firmware out there to
    employ a more reliable mode.
    
    In some cases, half a loaf is better than none.
    
    It would be great to influence "the industry" into moving away from
    traditional syslog udp/514 delivery, but to be accepted I think any
    solution will have to be able to receive such traffic, even if it's not
    the preferred transport.
    
    Nick
    
    -- 
    #include<stdio.h> /* SigMask 0.5 (sig.c) 20011019 PublicDomain */
    int main(c,v)char *v;{return !c?putchar(*v-1)&&main(0,v+1):main(0
    ,"Ojdl!Wbshjti!=obwAogs/dpn?!OGS!Tfojps!Tpguxbsf!Fohjoffs\v\1");}
    
    
    

    _______________________________________________ LogAnalysis mailing list LogAnalysisat_private http://lists.shmoo.com/mailman/listinfo/loganalysis



    This archive was generated by hypermail 2b30 : Mon Aug 26 2002 - 09:28:14 PDT