[Syslog] I-D Action:draft-gerhards-syslog-plain-tcp-08.txt (fwd)

Chris Lonvick <clonvick@cisco.com> Wed, 02 February 2011 14:36 UTC

Return-Path: <clonvick@cisco.com>
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost []) by core3.amsl.com (Postfix) with ESMTP id AB9C23A6D2A for <syslog@core3.amsl.com>; Wed, 2 Feb 2011 06:36:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.479
X-Spam-Status: No, score=-110.479 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([]) by localhost (core3.amsl.com []) (amavisd-new, port 10024) with ESMTP id OjG-jQvpotAx for <syslog@core3.amsl.com>; Wed, 2 Feb 2011 06:36:36 -0800 (PST)
Received: from sj-iport-4.cisco.com (sj-iport-4.cisco.com []) by core3.amsl.com (Postfix) with ESMTP id B128C3A6D28 for <syslog@ietf.org>; Wed, 2 Feb 2011 06:36:36 -0800 (PST)
Authentication-Results: sj-iport-4.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AgkGAFP7SE2rR7H+/2dsb2JhbACWdAEBjiNzoQObFoVTBIR4
Received: from sj-core-2.cisco.com ([]) by sj-iport-4.cisco.com with ESMTP; 02 Feb 2011 14:39:56 +0000
Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com []) by sj-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id p12EduZB028563 for <syslog@ietf.org>; Wed, 2 Feb 2011 14:39:56 GMT
Date: Wed, 2 Feb 2011 06:39:56 -0800 (PST)
From: Chris Lonvick <clonvick@cisco.com>
To: syslog@ietf.org
Message-ID: <Pine.GSO.4.63.1102020632350.23352@sjc-cde-011.cisco.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; format=flowed
Content-ID: <Pine.GSO.4.63.1102020632361.23352@sjc-cde-011.cisco.com>
Subject: [Syslog] I-D Action:draft-gerhards-syslog-plain-tcp-08.txt (fwd)
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>, <mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>, <mailto:syslog-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Feb 2011 14:36:37 -0000

Hi Folks,

I've updated the document to include the reference from Steve Bellovin.

We'd appreciate reviews and feedback.


---------- Forwarded message ----------
Date: Tue, 01 Feb 2011 18:15:01 -0800
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action:draft-gerhards-syslog-plain-tcp-08.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.

 	Title           : Transmission of Syslog Messages over TCP
 	Author(s)       : R. Gerhards, C. Lonvick
 	Filename        : draft-gerhards-syslog-plain-tcp-08.txt
 	Pages           : 13
 	Date            : 2011-02-01

There have been many implementations and deployments of legacy syslog
over TCP for many years.  That protocol has evolved without being
standardized and has proven to be quite interoperable in practice.

The aim of this specification is to document three things: how to
transmit standardized syslog over TCP, how TCP has been used as a
transport for legacy syslog, and how to correlate these usages to
ensure interoperability.

A URL for this Internet-Draft is:

Internet-Drafts are also available by anonymous FTP at:

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the