[Syslog-sec] SENDER-NAME, PROCID, MSGID

["Rainer Gerhards" <rgerhards@hq.adiscon.com>]

Hi all,

I've received a good idea from Dado Colussi (his comment is based on the
-10 version of syslog-protocol, thus his reference to SENDER-INST). With
his permission, I repost it here:

###
>>I have failed to convince myself that the SENDER-NAME, 
>>SENDER-INST and 
>>MSGID are well justified in the HEADER part. According to the syntax 
>>specified in Section 6, all of the fields are required. However, each 
>>field has a near-void semantics. There would be a nice mechanism of 
>>STRUCTURED-DATA for optional data with whatever semantics.
>>
>>Is there a clear common benefit of having these fields as a 
>>part of the 
>>HEADER instead of as a part of STRUCTURED-DATA? I think the HEADER 
>>should include fields that have clear semantics and only fields that 
>>MUST be present in each message.
###

Probably this could solve the past discussion we had on
PROCID/SENDER-INST.

Comments appreciated.

Rainer
_______________________________________________
Syslog-sec mailing list
Syslog-sec@www.employees.org
http://www.employees.org/mailman/listinfo/syslog-sec