--On Wednesday, April 25, 2018 2:02 AM +0100 Howard Chu <h...@symas.com>
wrote:
That still leaves a question of what to do with Debug messages that also
go to syslog - it's easier to identify problems if the error message
appears somewhere close to the log of the original request. So we'd need
a tool to interleave these in order, if we had to pull messages both from
the binary log and from syslog. Or, we could define a new custom packet
type for these Debug/diagnostic messages, and just spit them out into the
PCAP file too. This might require us to write a custom parser plugin for
WireShark or whatever, to render these messages. That's still not a big
deal, compared to inventing our own entire log postprocessing framework.
I like the idea of adding a custom packet type for the debug/diagnostic
messages and then developing the custom parser plugin for Wireshark etc.
Then everything could be handled within a single system.
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
