#3 RAW Profile: aggregated messages

[Rainer Gerhards]

I think SDSC's rfc3195 raw profile does not handle
aggregated messages in ANS frame. RFC 3195 says:

---
The overhead for one ANS frame is about thirty octets,
once the initial handshakes have been exchanged. If
this overhead is too high, then messages are likely
being generated at a high rate. In this case, multiple
syslog messages can be aggregated into a single ANS
frame, each separated by a CRLF sequence from the
preceding. The final message still MUST NOT end with
a CRLF.

For example,

L: MSG 1 0 . 0 50
L:
L: Central Services. This has not been a recording.
L: END
I: ANS 1 0 . 0 119 0
I:
I: <29>Oct 27 13:21:08 ductwork imxpd[141]:
Heating emergency.
I: <29>Oct 27 13:21:09 ductwork imxpd[141]:
Contact Tuttle.END
I: NUL 1 0 . 119 0
I: END
----

When I send multiple messages within a single frame
with the above syntax, they are treated as a single
message by SDSC.

Rainer