Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Listening with netcat on UDP 514 to syslog data I see that each sent log message is separated by <134>.

Does anyone note what <134> is?

share|improve this question
    
Ah okay it is defined in tools.ietf.org/html/rfc5424#section-6.2 -- trying to parse that :-) –  Kyle Brandt Apr 5 '11 at 23:46

2 Answers 2

up vote 5 down vote accepted

That is part of the header. "The Priority value is calculated by first multiplying the Facility number by 8 and then adding the numerical value of the Severity." So 134 / 8 = 16 (facility local0) remainder 6 (severity Informational: informational messages).

SYSLOG-MSG      = HEADER SP STRUCTURED-DATA [SP MSG]
HEADER          = PRI...
PRI             = "<" PRIVAL ">"
PRIVAL          = 1*3DIGIT ; range 0 .. 191
share|improve this answer

0134 is the octal code for backslash \.

This is an escape char, to avoid possible sql injections on syslog SQL backends.

See this message on the syslog-ng mailing list.

share|improve this answer
    
Hmm...I don't think so. –  Mark Wagner Apr 5 '11 at 23:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.