Skip to content
This repository has been archived by the owner on May 21, 2024. It is now read-only.

RFC3164 support old syslog #55

Closed
wants to merge 14 commits into from
Closed

Conversation

catap
Copy link

@catap catap commented Apr 27, 2024

Here a PR with goal to support many different old syslog.

This changes allows to support:

  • OpenBSD syslog
  • IP socket IQTS-IP200
  • Synology NAS
  • Unifi UAP and UGP

Probably many other edge cases and hardware.

Thus, it includes: #46, #49 and #54

aparcar and others added 12 commits December 4, 2022 01:36
both nontransparent and octetcounting use RFC5424 which isn't used by
many devices, i.e. OpenWrt or Ubiquiti routers.

Add a new function called NewParserRFC3164 to both.

Signed-off-by: Paul Spooren <mail@aparcar.org>
OpenBSD like many other hardware sends syslog messages without hostname,
here I added support of such messages.
Some old syslog may add LF between two messages, outside of counters.
This, it added missed WithMaxMessageLength into .rl
It is qutie confusing when it parses a message but returns error as
well, that it was mallforemd.

So, I've used the best effort flag as the way to decide. When it true,
it gnores all errors, but when it false it ignores the message.
Move changes to nontransparent/parser.go.rl and regenerate nontransparent/parser.go
Unifi thinks that it can be up to 48 characters, tolerate it.
catap added a commit to catap/loki that referenced this pull request Apr 29, 2024
@catap
Copy link
Author

catap commented Apr 30, 2024

@leodido any chance to review this series of commit? it should unblock support of BSD syslog inside Loki which will benefite to community in general.

catap added a commit to catap/loki that referenced this pull request Apr 30, 2024
@leodido
Copy link
Collaborator

leodido commented May 19, 2024

Hey @catap, thanks for your effort! ❤️

I've decided to keep maintaining this project but on my GitHub account.

So, please direct this pull request to https://github.com/leodido/go-syslog 🙏

@catap
Copy link
Author

catap commented May 19, 2024

@leodido thanks for takeing this back to life!

I've openned the same PR as leodido#2

@tkyocum tkyocum closed this May 21, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants