20 Oct
2009
20 Oct
'09
8:38 a.m.
On Wed, 2009-10-14 at 15:47 -0500, jnordwick wrote:
RFC 5426 (over UDP) does not seem to describe the header that syslog- ng keep complaining about. What I was able to tell from tcpdump is that the message is prefixed with the number of bytes in the message followed by a space (then the message with a terminating newline).
At least this seems to work for syslog-ng, but I am not sure how compliant I am being.
This seems to be a syslog-ng bug then. UDP doesn't have a frame header as the datagrams separate syslog messages just fine. I'll look into this. -- Bazsi