2

Listening with netcat on UDP 514 to syslog data I see that each sent log message is separated by <134>.

Does anyone note what <134> is?

1
6

That is part of the header. "The Priority value is calculated by first multiplying the Facility number by 8 and then adding the numerical value of the Severity." So 134 / 8 = 16 (facility local0) remainder 6 (severity Informational: informational messages).

SYSLOG-MSG      = HEADER SP STRUCTURED-DATA [SP MSG]
HEADER          = PRI...
PRI             = "<" PRIVAL ">"
PRIVAL          = 1*3DIGIT ; range 0 .. 191
-3

0134 is the octal code for backslash \.

This is an escape char, to avoid possible sql injections on syslog SQL backends.

See this message on the syslog-ng mailing list.

1
  • Hmm...I don't think so. – Mark Wagner Apr 5 '11 at 23:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.