FortiOS 6.0 Reliable Syslog Broken
- April 27, 2018
- 0 replies
- 3897 views
I'm currently developing an application to receive reliable syslogs from the Fortigate (testing with a 60D currently on 6.0 GA), unfortunately I'm having issues with both reliable and legacy-reliable modes.
The reliable mode unfortunately unreliably sends it's NUL terminators. After the TCP session is established I receive them for the first 3-6 logs (in this lucky case, about 13 logs) and then it never includes them again after that unless I re-establish the TCP session. It seems to forget to include those, and without them it's difficult to parse the incoming logs as there are no delimiters or anything. I've attached a sample of my program output that clearly outputs when the NUL terminator was found.
The legacy-reliable mode all I get is the following (BEEP):
RPY 0 0 . 0 52 Content-type: application/beep+xml
<greeting /> END
Unfortunately I haven't been able to figure out how to reply to this to get the actual logs and move forward with this method (which would at least be a workaround for the missing NULs in the reliable mode), any help on this front would be appreciated!
