Date: Fri, 25 Feb 2005 18:55:27 +0100 (CET) From: Lars Erik Gullerud <lerik@nolink.net> To: Mike Sturdee <sturdee@pathwaynet.com> Cc: current@FreeBSD.org Subject: Re: syslog msg size Message-ID: <20050225185200.I13634@electra.nolink.net> In-Reply-To: <20050224190926.Y41330@sun.mikesweb.com> References: <20050224190926.Y41330@sun.mikesweb.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 24 Feb 2005, Mike Sturdee wrote: > In trying to receive syslog(3) messages longer than 1024 bytes with > syslog-ng, I'm noticing FreeBSD's library function syslog(3) is the only > syslog implementation besides Solaris limited to 1024.. Has removing this > limitation ever been considered? Well, 1024 bytes is the max length specified in RFC 3164: 4.1 syslog Message Parts The full format of a syslog message seen on the wire has three discernable parts. The first part is called the PRI, the second part is the HEADER, and the third part is the MSG. The total length of the packet MUST be 1024 bytes or less. There is no minimum length of the syslog message although sending a syslog packet with no contents is worthless and SHOULD NOT be transmitted. Now, 3164 is of course only an Informational RFC, but breaking it can obviously still have potential compatibility issues. /leg
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050225185200.I13634>