SYSLOG

SYSLOG-MSG      = HEADER SP STRUCTURED-DATA [SP MSG]
HEADER          = PRI VERSION SP TIMESTAMP SP HOSTNAME
SP APP-NAME SP PROCID SP MSGID
= 1*3DIGIT ; range 0 .. 
PRI             = "<" PRIVAL ">"
PRIVAL    
VERSION         = NONZERO-DIGIT 0*2DIGIT
HOSTNAME        = NILVALUE / 1*255PRINTUSASCII
APP-NAME        = NILVALUE / 1*48PRINTUSASCII
MSGID           = NILVALUE / 1*32PRINTUSASCII
PROCID          = NILVALUE / 1*128PRINTUSASCII-TIME
FULL-DATE       = DATE-FULLYEAR "-" DATE-MONTH
TIMESTAMP       = NILVALUE / FULL-DATE "T" FULL "-" DATE-MDAY
      DATE-FULLYEAR   = 4DIGIT
      DATE-MONTH      = 2DIGIT  ; 01-12; month/year
FULL-TIME       = PARTIAL-TIME TIME
DATE-MDAY       = 2DIGIT  ; 01-28, 01-29, 01-30, 01-31 based on-OFFSET
      PARTIAL-TIME    = TIME-HOUR ":" TIME-MINUTE ":" TIME-SECOND
                        [TIME-SECFRAC]
      TIME-HOUR       = 2DIGIT  ; 00-23MOFFSET
TIME-NUMOFFSET  = ("+" / 
TIME-MINUTE     = 2DIGIT  ; 00-59
      TIME-SECOND     = 2DIGIT  ; 00-59
      TIME-SECFRAC    = "." 1*6DIGIT
      TIME-OFFSET     = "Z" / TIME-NU"-") TIME-HOUR ":" TIME-MINUTE


      STRUCTURED-DATA = NILVALUE / 1*SD-ELEMENT
      SD-ELEMENT      = "[" SD-ID *(SP SD-PARAM) "]"M-VALUE     = UTF-8-STRINcharacters '"', '\' and
SD-PARAM        = PARAM-NAME "=" %d34 PARAM-VALUE %d34
      SD-ID           = SD-NAME
      PARAM-NAME      = SD-NAME
      PARA                              ; ']' MUST be escaped.
      SD-NAME         = 1*32PRINTUSASCII
                        ; except '=', SP, ']', %d34 (")

      MSG             = MSG-ANY / MSG-UTF8
MSG-ANY         = *OCTET ; not starting with BOM
      MSG-UTF8        = BOM UTF-8-STRING
      BOM             = %xEF.BB.BF


UTF-8-STRING    = *OCTET ; UTF-8 string as specified

                         ; in RFC 3629
OCTET           = %d00-255
SP              = %d32
26
      NONZERO-DIGIT   = %d49-
PRINTUSASCII    = %d33-
157
  DIGIT           = %d48 / NONZERO-DIGIT
 NILVALUE        = "-"