[syslog-ng] Invalid frame header; header=''

Balazs Scheidler bazsi at balabit.hu
Tue Oct 20 08:38:56 CEST 2009


On Wed, 2009-10-14 at 15:47 -0500, jnordwick wrote:
> RFC 5426 (over UDP) does not seem to describe the header that syslog- 
> ng keep complaining about. What I was able to tell from tcpdump is  
> that the message is prefixed with the number of bytes in the message  
> followed by a space (then the message with a terminating newline).
> 
> At least this seems to work for syslog-ng, but I am not sure how  
> compliant I am being.
> 

This seems to be a syslog-ng bug then. UDP doesn't have a frame header
as the datagrams separate syslog messages just fine.

I'll look into this.

-- 
Bazsi




More information about the syslog-ng mailing list