[zeromq-dev] Logging format for sys://log transport

[Martin Sustrik]

On 11/16/2010 07:54 PM, Pieter Hintjens wrote:
>
> It lets you subscribe to both GE severity and EQ category in one go. 
> Yes, it's being clever... sorry about that. But it makes use simpler 
> IMO.  Think about taking subscriptions from a config file.
>
> Anyhow, I'm pretty sure we don't even need categories here.
>
Good point.

We should first know what exactly is going to be reported and how the 
reports are going to be used. Then we can think about how to represent it.

For now there are only two places I am aware of where something should 
be definitely logged:

1. When connection is dropped because of invalid data.
2. When connection is dropped because of over-sized message.

In both cases the motivation for logging is almost the same: The event 
indicates either a misbehaving application or an attack.

Martin