Replies: 1 comment 1 reply
-
This is the rfc5424 style syslog format and framing. You can get rid of the
message length (which is part of the transport protocol) by using the
network() driver. The network() driver would use the BSD style message by
default, but you can change that to rfc5424 using flags(syslog-protocol).
So
network("ipaddr" flags(syslog-protocol))
Or simply
network("ipaddr") if you prefer BSD message format.
…On Tue, Jul 11, 2023, 14:37 vostrelt ***@***.***> wrote:
Hello,
I send syslog messages using syslog driver with transport(tcp) and I
observe every sent message results in two packets. First one contains only
number - length of syslog message. Second one contains the message itself.
Why is it? Can it be disabled somehow?
Thanks, Tomáš
[image: image]
<https://user-images.githubusercontent.com/114070266/252665094-69a3a5ed-0afe-4e61-ae51-eaf6cf851911.png>
—
Reply to this email directly, view it on GitHub
<#4543>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAFOK5VIQQNOSUD2HCA345LXPVCIDANCNFSM6AAAAAA2F6FSCA>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
1 reply
Answer selected by
vostrelt
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello,
I send syslog messages using
syslog
driver withtransport(tcp)
and I observe every sent message results in two packets. First one contains only number - length of syslog message. Second one contains the message itself. I guess it means it uses octet-counted framing. Can it be disabled? Or should I use thenetwork
driver instead?Thanks, Tomáš
Beta Was this translation helpful? Give feedback.
All reactions