[rsyslog] cisco router config and plain TCP syslog

[Rainer Gerhards]

> > Quick follow-up: I am working with them, hope to get some results
out
> of
> > this conversation. As this bug seems to actually exist in IOS and
> lots
> > of IOS are rolled out, I'll try to do a work-around, at least if I
> can
> > convince myself that it will work in at least many cases ;)
> 
> I've been watching the thread.  Seems like some people have adopted a
> workaround based on the signature at the beginning of the Cisco log
> entries, but that's pretty obviously subpar - their switching gear
> doesn't seem to add those, at least on the 12.1 2950 I test against.
> Sorry I don't have much else to offer here 

You offered a lot. You post helped track down the problem source and
made make go the right direction :) I think the best thing now is to
wait for what the Cisco folks come up with. And if that takes too long,
I'll add an $WorkAroundCrazyTCPBug directive and see if it works out ;)

> - like the OP noted, all my
> logging has been on the LAN, and trusted segments to boot.  I've seen
> setups where remote routers logged over IPSEC or GRE tunnels, but
> those were still using UDP.

Rainer