[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Issue 8: Length of syslog messages



Issue 8:  Length of syslog messages
http://www.employees.org/~lonvick/draft-ietf-syslog-sign-12.html#format

>From Archive:
http://www.mail-archive.com/syslog-sec%40employees.org/msg01118.html
http://www.mail-archive.com/syslog-sec%40employees.org/msg01119.html
http://www.mail-archive.com/syslog-sec%40employees.org/msg01120.html

It's defined as 1024 in several places.  Mike McFaden offers a good
suggestion in the 3rd pointer above:

   I prefer that the minimum size a conformant
   implementation must support be defined.
   SNMP over UDP specifies a minimum message size of 484.
   If one wants to support a larger msg size, just configure for it.
   The same goes for switches these days too.
   Otherwise why not just recommend a transport that has
   path mtu discovery in cases where syslog msg length > 1024.

Any comments or other suggestions?