Re: [logs] Re: syslog/tcp (selp)

From: Bennett Todd (betat_private)
Date: Thu Jan 09 2003 - 12:37:34 PST

  • Next message: Rainer Gerhards: "RE: [logs] syslog/tcp (selp)"

    2003-01-09T04:22:37 Balazs Scheidler:
    > * the use of RFC3164 timestamp should not be forbidden (it is easy to decide
    >   whether RFC3164 or RFC3339 timestamp is there)
    
    Sorta concur, although if we're not going to forbid RFC 3164
    timestamps, perhaps we should mention their grave defects (no year,
    no timezone) to motivate people to make the Right choice:-).
    
    > * we should not discuss character sets, we should only state that the MSG
    >   part is transmitted 8bit clean
    
    Disagree; if we're not going to prohibit anything outside of
    US-ASCII, I think we should briefly discuss charset issues in a
    Security Considerations section. If MSG is guaranteed 8bit clean
    transport, and implementors don't consider charset issues, there
    _Will_ be security consequences.
    
    -Bennett
    
    
    

    _______________________________________________ LogAnalysis mailing list LogAnalysisat_private http://lists.shmoo.com/mailman/listinfo/loganalysis



    This archive was generated by hypermail 2b30 : Thu Jan 09 2003 - 15:20:29 PST