Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Jan 2024 10:29:16 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 220246] syslogd does not send RFC3164-conformant messages
Message-ID:  <bug-220246-227-NveIJuby75@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-220246-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-220246-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220246

Michal Scigocki <michal.os@hotmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |michal.os@hotmail.com

--- Comment #6 from Michal Scigocki <michal.os@hotmail.com> ---
Created attachment 247881
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D247881&action=
=3Dedit
patch with added rfc3164-strict format, against 15-CURRENT

Hi,

I had a look at RFC3164 and found a couple of interesting items:

- Section 4.2 of RFC3164 states there are no set requirements for the conte=
nts
of the syslog packet. So the existing format is technically valid.
- The format described in RFC3164 (i.e. "<PRI>TIMESTAMP HOSTNAME MSG") is o=
nly
RECOMMENDED to be used. It's not enforced.
- The "Forwarded from HOSTNAME:" field is not mentioned anywhere in RFC3164=
. I
found it originally came about in FreeBSD PR 7055, back in 1998.
- Section 4.3.1 of RFC3164 states syslog relay servers that forward messages
MUST do so without making any changes to the packet.

Given this, I think the existing bsd/rfc3164 format should be kept as-is for
backward compatibility, but a new optional format should be added that stri=
ctly
conforms to the recommended format defined in RFC3164.

I have attached a new patch based on Bryan Drewery's patch. It adds the thi=
rd
optional format to the -O flag, "strict" or "rfc3164-strict", which adds the
hostname and excludes "Forwarded from" field in the network syslog message,=
 and
also updates the man page.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-220246-227-NveIJuby75>