Re: [logs] RE: syslog/tcp (selp)

From: Mikael Olsson (mikael.olssonat_private)
Date: Fri Jan 10 2003 - 10:41:06 PST

  • Next message: Darren Reed: "Re: [logs] RE: syslog/tcp (selp)"

    Andrew Ross wrote:
    > 
    > Sounds good to me.
    > 
    > Are you going to put the hostname AND host address as required fields?
    
    Wouldn't that break things needlessly?  
    One would think recommending fully qualified host names to be enough?
    
    
    > Also, it should be stated in the spec that a collector must not modify
    > the address or hostname when it forwards the message. This will then
    > allow us to pass it via many collectors and still retain the original
    > address of the sender.
    
    Agree fervently. The requirement to alter the hostname when forwarding
    is just plain b0rken.
    
    > The peer address of the collector forwarding the message can be obtained
    > from the socket if required.
    
    Definately.
    
    
    -- 
    Mikael Olsson, Clavister AB
    Storgatan 12, Box 393, SE-891 28 ÖRNSKÖLDSVIK, Sweden
    Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
    Fax: +46 (0)660 122 50       WWW: http://www.clavister.com
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Fri Jan 10 2003 - 12:24:33 PST