Re: [logs] RE: syslog/tcp (selp)

From: Darren Reed (avalonat_private)
Date: Wed Jan 15 2003 - 07:09:16 PST

  • Next message: Buck Buchanan: "[logs] Logging in the real world"

    In some mail from Bennett Todd, sie said:
    > 
    > 2003-01-15T04:38:01 Rainer Gerhards:
    > > Honestly, I do not like to call it reliable as it is not fully
    > > reliable.
    > 
    > How so? TCP is reliable, no?
    > 
    > > RFC3195 is.
    > 
    > I'd expect RFC 3195 to be less reliable, until and unless we get a
    > simple and robust implementation of the appropriate subset of BEEP;
    > at least from what I've read on these lists, implementors looking
    > for BEEP libs are not always pleased with their choices.
    > 
    > > But SELP/SLP/RLP ;) is a simplex protocol, without any
    > > acknowledgment from the receiver (except for the TCP
    > > acknowledgment).
    > 
    > That TCP ack seems to me to be all that's needed.
    
    And how does an application get notified of this event ?
    
    TCP guarantees in-order delivery of a stream of bytes from one
    socket to another but does not tell you what data got lost when
    the stream was being shut down.  You need a layer 5 for that :)
    
    Darren
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Wed Jan 15 2003 - 07:34:35 PST