Issue 8: Length of syslog messages http://www.employees.org/~lonvick/draft-ietf-syslog-sign-12.html#format
>From Archive: http://www.mail-archive.com/syslog-sec%40employees.org/msg01118.html http://www.mail-archive.com/syslog-sec%40employees.org/msg01119.html http://www.mail-archive.com/syslog-sec%40employees.org/msg01120.html It's defined as 1024 in several places. Mike McFaden offers a good suggestion in the 3rd pointer above: I prefer that the minimum size a conformant implementation must support be defined. SNMP over UDP specifies a minimum message size of 484. If one wants to support a larger msg size, just configure for it. The same goes for switches these days too. Otherwise why not just recommend a transport that has path mtu discovery in cases where syslog msg length > 1024. Any comments or other suggestions?
