RE: [logs] syslog/tcp (selp)

From: Frank O'Dwyer (fodat_private)
Date: Thu Jan 09 2003 - 17:34:23 PST

  • Next message: Andrew Ross: "RE: [logs] RE: syslog/tcp (selp)"

    Bennet Todd wrote:
    > If we allow MSGs that include CRLFs within them, we're also
    > accepting that outputting these records in a straight text file is a
    > lossy operation; and that in turn means that it's easy to send a
    > message that "forges" a log entry in the file.
    
    Why can't the transport simply escape the CRLFs & handle dumping to text the
    same way?
    
    Cheers,
    Frank.
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Fri Jan 10 2003 - 09:49:37 PST