Re: [logs] Syslog payload format

From: Balazs Scheidler (bazsiat_private)
Date: Thu Jan 02 2003 - 07:37:26 PST

  • Next message: Mirelama: "[logs] loganalysis,^J^ Extra Length"

    On Thu, Jan 02, 2003 at 10:01:17AM -0500, Marcus J. Ranum wrote:
    > Balazs Scheidler wrote:
    > >What do others think about whether typing of tags should be done or not?
    > I don't think we need to type tags. The whole idea of tagging
    > the data is to allow it to be implicity typed. So it's OK to
    > convert to a string for simplicity, if you know the tag. There's
    > no need to get overcomplex - otherwise we'll just have ASN.1 all
    > over again.
    I completely agree.
    > list to pop up and say "why not use XML"??   :(  :(  :(  Indeed,
    > XML does _EXACTLY_ the kind of "type inference from tag name"
    > (e.g.: the DTD) that I am talking about!!!  
    nobody argued that XML is to be used.
    >                                            Now, we've done the
    > "what would an API for a new syslog client side look like"
    > discussion and have basically re-discovered syslog twice, varargs
    > twice, my suggestion twice, and lord knows what else. Collectively,
    > we're doing such a good job of beating horses to death without
    > getting anyplace we may as well join the IETF. This stuff is so
    > damn obvious it's not even funny. It's just logging, it's not
    > brain surgery.
    We are about to implement a client side library to be used on syslog
    clients. It will be shipped with syslog-ng and as syslog-ng is quite popular
    I think it has a slight chance of getting acceptance.
    PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
    LogAnalysis mailing list

    This archive was generated by hypermail 2b30 : Thu Jan 02 2003 - 08:14:39 PST