Revision history  [back]

The function dissect_syslog in packet-syslog.c shows that RFC 6587 is not yet supported.
It does not expect a syslog message to start with a length and treats the first number as a facility code.

Please report this as an enhancement request on the Wireshark issues list.