RE: [Syslog] Dbh re-Review of -mib-11, part 1

["Rainer Gerhards" <rgerhards@hq.adiscon.com>]

So far, just one comment...

> 1.6 > > 11) in SyslogSeverity, I recommend removing the 
> second sentnece
>      > > in the
>      > > description "The syslog protocol uses the values 0 
> (emergency)
>      > > to 7 (debug)." since this is already spelled out in 
> the SYNTAX
>      > > clause,andshows that 99 (other) is also used. Why do we
>      > > need 99? Are other
>      > > values valid?
>      Partially fixed. When is "other" used?
> 
> Response.
>      "other" will be used to count messages that do not have 
> severity in
>      the range 0-7. The syslog protocol specs (-19.txt) does 
> not disallow
>      such messages.

Actually, -syslog-protocol disallows this by the way the PRI value is
specified (this was different in previous versions of the I-D). In
short: PRI MOD 8 is severity. So if a severity greater than 7 would be
given, it would actually modify the facility. See 6.2.1:

--
  The Priority value is calculated by first multiplying the Facility
  number by 8 and then adding the numerical value of the Severity.
--

Rainer