Native macOS · SwiftUI · Beta validation

Syslog traffic,
under control.

LogSalvo is a native Mac workspace for generating, receiving, inspecting and forwarding syslog traffic—built for engineers who need to see exactly what crossed the wire.

Explore the product View the original project

0.4.0TestFlight build 3 submitted
macOSnative SwiftUI app
Local firstno cloud account

LogSalvo Traffic Pulse icon, with cyan network pulses around a central log stream

A new identity

The branding has changed, too.

The Swift edition retires the legacy Tech Shed application artwork in favour of the LogSalvo Traffic Pulse: a dedicated product mark inspired by messages moving through a live network.

The cyan pulse, deep navy interface and “Syslog Traffic Studio” descriptor now run through the app and its macOS icon, giving LogSalvo an identity of its own while keeping its Tech Shed roots.

The workspace

Built around the traffic.

Two focused workspaces cover both sides of a syslog conversation without hiding the protocol details.

LogSalvo Swift send workspace showing destination, transport, security and RFC 3164 message controls — **Send with intent.** Choose a destination and transport, build RFC 3164 or RFC 5424 messages, pace a run, retry failures and preview the exact output before transmission.

LogSalvo Swift receive workspace showing listener settings, filters, message table and detail inspector — **Receive and investigate.** Listen on UDP or TCP, filter a live stream, inspect parsed fields and raw payloads, then export what matters.

Capabilities

A traffic studio, not just a sender.

Compose & send

RFC 3164 and RFC 5424 formatting, templates, structured data, message padding, pacing, retries, run cancellation and dry-run previews.

Transport securely

UDP, TCP and TLS with system or custom CA trust, Keychain-backed client identities, IPv4 and IPv6 resolution and explicit source binding.

Parse real traffic

Understand RFC syslog alongside JSON, Cisco IOS, CEF and UniFi payloads, with PRI decoding, search, sorting and a raw-message inspector.

Forward at scale

Relay exact payloads to multiple UDP, TCP or TLS destinations with filters, bounded queues, retries, loop prevention and health counters.

Keep useful evidence

Pause and queue a live view, bound in-memory retention and export selected traffic as CSV, JSON Lines or unchanged raw payloads.

Stay aware

Opt-in macOS notifications support privacy-conscious summaries, rules, deduplication, rate limiting and click-through to the matching event.

Native by design

Rebuilt for the Mac, not wrapped for it.

The Swift migration separates protocol handling, transport, receiving and privileged operations into focused modules. The interface is built in SwiftUI, supports system, light and dark appearances, and uses accessibility-aware native controls.

Privileged ports without a privileged app

The direct-download build includes an administrator-approved LaunchDaemon helper path for ports 1–1023, with production validation still outstanding. The sandboxed TestFlight build omits this helper and currently uses listener ports 1024–65535. Sending to a remote port 514 does not require a privileged local listener.

CoreTransportReceiverPrivilegedCLIMac

Project status

TestFlight submitted. Release validation continues.

Updated 27 September 2026: version 0.4.0 has working sender, receiver, forwarding, notification and settings workflows. Build 3 passed Apple upload validation and was submitted for TestFlight beta review on 24 September; the last recorded state was “Waiting for Review”. Installation and functional checks through TestFlight remain open.

The direct-download signing and notarisation workflow is prepared, but a validated notarised release, signed-helper testing, Intel validation and final interface parity remain release gates. The original Python edition remains the cross-platform reference.

Read the LogSalvo project update →

Syslog traffic,under control.