RE: [Syslog-sec] Wrapping up syslog-protocol and syslog-transport-udp

[Clément MATHIEU <mathieuc@echo.unice.fr>]

Le mercredi 18 mai 2005 à 11:21 +0200, Rainer Gerhards a écrit :

> syslog-protocol. My list is:

[SNIP]

hi,

I'm hopping it is not too late.

I had like to add in section 6.1 that when a relay truncates the MSG
field, the resulting string MUST be a valid UTF-8 sequence. It is so
easy to forget...

As second item I am wondering why section 6.3 says that it is mandatory
to escape '"', '\' and ']' but a receiver SHOULD accepts an invalid
message. Maybe it has been discussed before ? 

IMHO it will make more sense to permit escapement of any character or
to tell that an invalid escapement will result in message dropping. 

It is like to say "If 5 in found in TRUNCATE field, it is invalid but
accept and log it". If the sender sends us an invalid message then it
has to be dropped. I do not see why character escapement should be an
exception.  

Clément MATHIEU

_______________________________________________
Syslog-sec mailing list
Syslog-sec@www.employees.org
http://www.employees.org/mailman/listinfo/syslog-sec