<div dir="auto">Yes, recent versions would accept normal bsd like messages. The key to watch out is the framing, as that needs to be correct.<div dir="auto"><br></div><div dir="auto">syslog(transport(tcp)) expects rfc5425 (or rfc5426, cant remember which) style framing </div><div dir="auto"><br></div><div dir="auto">network(transport(tcp) flags(syslog-protocol)) accepts both old and new formats without framing</div><div dir="auto"><br></div><div dir="auto">syslog(transport(udp)) has no framing, so again it accepts 5424 and 3164 and uses udp.</div><div dir="auto"><br></div><div dir="auto">Actually, we may want to imply flags(syslog-protocol) everywhere in the future, there's an easy way to autodetect the format.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Feb 16, 2018 21:31, "Scot" <<a href="mailto:scotrn@gmail.com">scotrn@gmail.com</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>




<span></span>





<p class="m_5585066348693935500gmail-p1" style="margin:0px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:normal;font-family:Helvetica"><br></p><p class="m_5585066348693935500gmail-p1" style="margin:0px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:normal;font-family:Helvetica"></p><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">Will the syslog() source driver support both <span style="font-family:Helvetica">RFC5424 and RFC3164 from different hosts at the same time in flight?  </span></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><span style="font-family:Helvetica"> </span></div><p></p><p class="m_5585066348693935500gmail-p1" style="margin:0px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:normal;font-family:Helvetica">source s_syslog_tcp  { syslog(port(514) transport("tcp")); };</p><p class="m_5585066348693935500gmail-p1" style="margin:0px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:normal;font-family:Helvetica">source s_syslog_udp { syslog(port(514) transport("udp")); };<br></p>


</div><div><br></div><div><br></div></div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>