Date: Sun, 18 Oct 1998 09:13:05 -0600 From: Brett Glass <brett@lariat.org> To: "Jeffrey J. Mountin" <jeff-ml@mountin.net>, "Jan B. Koum " <jkb@best.com>, Sheldon Hearn <axl@iafrica.com>, Igor Roshchin <igor@physics.uiuc.edu> Cc: security@FreeBSD.ORG Subject: Re: syslogd and syslog.conf (new feature) Message-ID: <4.1.19981018091111.0411fef0@mail.lariat.org> In-Reply-To: <3.0.3.32.19981018011033.00fc17e8@207.227.119.2> References: <19981017134231.C22818@best.com> <XFMail.981017154818.vev@michvhf.com> <199810171855.NAA18114@set.spradley.tmi.net> <XFMail.981017154818.vev@michvhf.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 01:10 AM 10/18/98 -0500, Jeffrey J. Mountin wrote: >One last thought about syslogd. If you consider the default setup for >syslog.conf and the fact that *most* messages are going to one logfile, >which can get messy and difficult to discern the important from the >routine. With that in mind why not have the LEVEL after the FACILITY in >the log? > ><date> <host> <program>[<pid>]: <level>: <message> > >Programs like ssh and Apache do something along this line. There's a good reason for this. If you want to delimit the fields with spaces rather than tabs, it's easiest if one puts the field that's most likely to contain spaces (e.g. the message) at the end. Then, when the software parses the line, it can stop treating spaces as field delimiters at that point. Yes, it's a hack, but it's used in everything from Apache to inetd. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.1.19981018091111.0411fef0>