HOSTNAME Field

[Christopher Lonvick <clonvick@cisco.com>]

Hi Folks,

Going along with the proposed changes to the TIMESTAMP field, perhaps it
would be good to address the HOSTNAME field.  First, the HOSTNAME field is
just that; the host name without the domain name.  This goes against
almost everything else Internet-ish and IETF-ish so I'd like to propose
that the HOSTNAME field contain either a HOSTNAME-3164 format, for legacy
compatability, or a HOSTNAME-STD13 format which provides for a full host
name and fqdn.  Currently, Section 2.2 of the syslog-sign ID has the
following text:

---vvv--- Currently in Section 2.2 ---vvv---

   The HOSTNAME field will contain only the hostname, the IPv4 address,
   or the IPv6 address of the originator of the message. The preferred
   value is the hostname. If the hostname is used, the HOSTNAME field
   MUST contain the hostname of the device as specified in STD-13 [4].
   The Domain Name MUST NOT be included in the HOSTNAME field. If the
   IPv4 address is used, it MUST be shown as the dotted decimal
   notation as used in STD-13 [5]. If an IPv6 address is used, any
   valid representation used in RFC-2373 [6] MAY be used. A single
   space character MUST also follow the HOSTNAME field.

---^^^--- Currently in Section 2.2 ---^^^---

I would propose that it be changed to the following:

---vvv--- Proposed change to Section 2.2 ---vvv---

   The HOSTNAME field will contain an indication of the originator of
   the message in one of four formats:  only the hostname, the hostname
   and domainname, the IPv4 address, or the IPv6 address.  The preferred
   value is the hostname and domainname in the format specified in
   STD-13 [RFC 1034 and 1035].  This format will be referred to in this
   document as HOSTNAME-STD13.  If only the hostname is used, the
   HOSTNAME field MUST contain the hostname only of the device as
   specified in STD-13 [4].  This format is discouraged but provides for
   legacy compatability with the format described in RFC 3164.  This
   format will be referred to in this document as HOSTNAME-3164.  In
   this format, the Domain Name MUST NOT be included in the HOSTNAME
   field.  If the IPv4 address is used, it MUST be shown as the dotted
   decimal notation as used in STD-13 [5], and will be referred to as
   HOSTNAME-IPV4.  If an IPv6 address is used, any valid representation
   used in RFC-2373 [6] MAY be used and will be referred to as
   HOSTNAME-IPV6. A single space character MUST also follow the
   HOSTNAME field.

   Messages containing Signature Blocks and Certificate Blocks as
   described in this document MUST use the HOSTNAME-STD13 format in
   the HOSTNAME field.

---^^^--- Proposed change to Section 2.2 ---^^^---

Please respond to the list about your thoughts on this.

Thanks,
Chris