[syslog-ng]Re: log format

Jeremy Mates syslog-ng@lists.balabit.hu
Fri, 18 Jun 2004 07:59:10 -0700


* Paul Gamble - MWEB <PGamble@mweb.com>
> I have a test server that receives records of the following form:
> <22><standard syslog log<22><another standard syslog record>, etc, etc
> What is the meaning of <22>? Can I rely on this as a record separator?

See a syslog protocol document, such as RFC 3164, as well as the local
sys/syslog.h header file for details on the format of a syslog message.

For a testing UDP syslog daemon implementation in Perl, see:

http://sial.org/code/perl/scripts/syslog_snarf.pl