[Syslog-sec] -transport-udp, section 4.2 - source port

["Rainer Gerhards" <rgerhards@hq.adiscon.com>]

WG,

4.2 says:

###
   Each syslog sender process MUST attempt to use the same source port
   for the life of the process.  If due to an error or other condition
   it becomes impossible for the process to continue to use the same
   port, it MAY start using a new source port, but it MUST generate a
   new random MessageId for the first message after changing the port
   and then MUST continue incrementing the new MessageId value for
   subsequent messages.
###

Is the MUST really necessary? I think a SHOULD would do nicely.

Reasoning:
Look at a multi-threaded sender, sending syslog messages from multiple
concurrently running threads. In such an implementation, each thread
eventually has its own send socket and as such the source port will not
be consistend within the process. Of course, for a single fragmented
message, the source would be consistent, as this would be sent by a
single thread.

I opt to make it a SHOULD.

Rainer
_______________________________________________
Syslog-sec mailing list
Syslog-sec@www.employees.org
http://www.employees.org/mailman/listinfo/syslog-sec