
16 Feb
2009
16 Feb
'09
5:51 p.m.
Darryl Green wrote:
A useful RFC3164 sender capability would seem to require only the development of a sink able to format messages in accordance with RFC3164 and send them over UDP. ... or TCP. And, perhaps, with an encryption layer.
What logging standard/spec/protocol/system are you refering to? There is no such facility for syslog. There is no such facility in RFC3164. Nobody has asked for it. TCP for log messages is a bad idea.
http://tools.ietf.org/html/rfc3195 It certainly will be asked for, eventually.
Don't send syslog over insecure channels. Use IPSec.
The point is not only in security, but also in delivery reliability and order. UDP doesn't provide that.