syslogparser icon indicating copy to clipboard operation
syslogparser copied to clipboard

Error parsing RFC3164 messages without a timestamp

Open securityguy opened this issue 2 years ago • 0 comments

RFC3164 messages without a timestamp, such as those produced by some Ubiquiti devices, are detected as RFC3164 but then parsing fails with "Timestamp format unknown"

For example,

<14>MiniSwitch 7483c04f9d75,USW_FLEX_MINI-1.8.6.694: NETDEV: Setup PVID... done

where "MiniSwitch" is the hostname, returns the error "Timestamp format unknown"

Can we just return no timestamp instead of an error?

securityguy avatar Feb 21 '23 00:02 securityguy