Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

The function dissect_syslog in packet-syslog.c shows that RFC 6587 is not yet supported.
It does not expect a syslog message to start with a length and treats the first number as a facility code.

Please report this as an enhancement request on the Wireshark issues list.