Util-Linux Archive mirror
 help / color / mirror / Atom feed
* logger: should priority come before octet-count?
@ 2023-12-11 21:04 Goldwyn Rodrigues
  2023-12-12 11:00 ` Karel Zak
  0 siblings, 1 reply; 2+ messages in thread
From: Goldwyn Rodrigues @ 2023-12-11 21:04 UTC (permalink / raw
  To: util-linux

Hi,

When providing --octet-count with --rfc5424, the message prefixes the
message length on the message. This however comes before priority, and
the syslog message looks like:

120 <13>1 2023-12-11T14:22:08.433695-06:00 kora root - rsyslog_dbg [timeQuality tzKnown="1" isSynced="0"] dummy goes to town

If you notice, <13> is shown in the message itself, as opposed to be
interpreted as priority by the logging process.

Command: ./logger --rfc5424 --octet-count --stderr  --socket /dev/log "dummy goes to town"

Without --octet-count, the message is fine comes out fine.

-- 
Goldwyn

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: logger: should priority come before octet-count?
  2023-12-11 21:04 logger: should priority come before octet-count? Goldwyn Rodrigues
@ 2023-12-12 11:00 ` Karel Zak
  0 siblings, 0 replies; 2+ messages in thread
From: Karel Zak @ 2023-12-12 11:00 UTC (permalink / raw
  To: Goldwyn Rodrigues; +Cc: util-linux

On Mon, Dec 11, 2023 at 03:04:07PM -0600, Goldwyn Rodrigues wrote:
> Hi,
> 
> When providing --octet-count with --rfc5424, the message prefixes the
> message length on the message. This however comes before priority, and
> the syslog message looks like:
> 
> 120 <13>1 2023-12-11T14:22:08.433695-06:00 kora root - rsyslog_dbg [timeQuality tzKnown="1" isSynced="0"] dummy goes to town

As described by RFC: https://datatracker.ietf.org/doc/html/rfc6587#section-3.4.1

I think --octet-count makes sense only in situations when used against server
that supports it (implements RFC6587 over TCP).

The octet count is used as a framing method to separate messages. IMHO
it has to be at the beginning.

    Karel

-- 
 Karel Zak  <kzak@redhat.com>
 http://karelzak.blogspot.com


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2023-12-12 11:00 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-12-11 21:04 logger: should priority come before octet-count? Goldwyn Rodrigues
2023-12-12 11:00 ` Karel Zak

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).