[rsyslog] cisco router config and plain TCP syslog

[Rainer Gerhards]

> > http://kb.monitorware.com/tcp-syslog-fill-s-up-buffer-and-doesn-t-
> log-single-events-t8705.html
> 
> It would seem they're using some version of IOS 12.3 or 12.4; the
> 'transport X' predicate was introduced some time in the prior but not
> documented until the latter.  It would be good to know precisely what
> version they are running for reference anyway.
> 
> For all I can tell (not having set up a test env myself), it would
> seem that just because one indicates TCP as the transport, the
> underlying engine doesn't change its semantics and remains at the
> UDP-esque 'one packet per message'.  For that matter, I see references
> specifically to RFC3164 as opposed to 3195.  Leave it to Cisco...

Quick follow-up: I am working with them, hope to get some results out of
this conversation. As this bug seems to actually exist in IOS and lots
of IOS are rolled out, I'll try to do a work-around, at least if I can
convince myself that it will work in at least many cases ;)

Rainer