RE: Transport draft preview

["Andrew Ross" <andrew@kiwisyslog.com>]

Hi All,

Can anyone tell me why we are talking about 16MB syslog messages at all?


I thought the spirit of syslog was a quick, human readable, single
lined, informational message that can be logged to disk and be parsed by
a reporting tool. Even taking into account UTF-8 encoding and the
possibility of some binary data, do we *really* need 16MB? 1024 bytes
does nicely in most cases, taking the max to 64KB is workable, but
taking it to 16MB is just making a rod for our own backs. Even on a nice
machine with stacks of memory, having to buffer and rebuild 16MB
multipart messages will just be a nightmare.

If we want to send huge dumps of binary data, we should use TFTP or FTP
to transfer it. Let's keep the concept of syslog to something that is
sensible.

Thoughts?

Andrew