1 | initial version |
The function dissect_syslog in packet-syslog.c shows that RFC 6587 is not yet supported.
It does not expect a syslog message to start with a length and treats the first number as a facility code.
Please report this as an enhancement request on the Wireshark issues list.