Some great points Albert.
I'll add my 2c worth...
I agree, CONTENT, is a much better description than CONTEXT.
The maximum hostname size would be 63 chrs?? so that it conforms to the DNS
RFC?
As a suggestion for truncated messages:
If the total size exceeds 1024 chrs: Truncate to 1021 chrs and add "..." to
indicate that the message has been truncated. Since messages are intended to
be read by humans, we need some quick way to identify that there was
originally more to the message than we are reading. The small loss of
information (3 chrs) is made up by the fact that we know for sure that the
message was truncated.
Andrew
Kiwi's Syslog Daemon
www.kiwi-enterprises.com
