[syslog-ng] [Bug 100] New: Hostnames that start with 4+ digits mess up the time system

[Patrick H.]

Well to be fair, hostnames that start with a number are a violation of 
RFC 952.
http://www.ietf.org/rfc/rfc952.txt
"The first character must be an alpha character"

-Patrick


Sent: Tue Dec 07 2010 16:49:03 GMT-0700 (Mountain Standard Time)
From: bugzilla at bugzilla.balabit.com
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] [Bug 100] New: Hostnames that start with 4+ digits 
mess up the time system
> https://bugzilla.balabit.com/show_bug.cgi?id=100
>
>            Summary: Hostnames that start with 4+ digits mess up the time
>                     system
>            Product: syslog-ng
>            Version: 2.0.x
>           Platform: PC
>         OS/Version: Linux
>             Status: NEW
>           Severity: normal
>           Priority: unspecified
>          Component: syslog-ng
>         AssignedTo: bazsi at balabit.hu
>         ReportedBy: D.Ojalvo at f5.com
> Type of the Report: ---
>    Estimated Hours: 0.0
>
>
> Created an attachment (id=26)
>  --> (https://bugzilla.balabit.com/attachment.cgi?id=26)
> My patch proposal
>
> If syslog is handling a message with an rfc 3164-type timestamp then a hostname that begins with 4 digits, 
> the time parser will mess up because it thinks that it is dealing with a linksys-style timestamp that includes the year,
> when the rfc3164 timestamp does not. I wrote a patch that adds a strict rfc3164 parsing option to the syslog startup.
>
>
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20101207/ba403991/attachment.htm