LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 06-26-2008, 03:31 PM   #1
awilisch
LQ Newbie
 
Registered: Dec 2003
Location: Cincinnati, OH
Posts: 28

Rep: Reputation: 15
Syslog not binding to 514


I'm having an issue with a Centos 5 installation. I'm trying to setup the syslog on my nagios/splunk server to accept messages from other syslog servers. I've made the necessary change to the /etc/sysconfig/syslog file, adding the -r option. I've restarted the syslog daemon and even restarted the whole server, but I'm not seeing it binding to port 514.

When I do a netstat -an |grep syslog I get nothing.

If I do a netstat -an |grep 514 I get
udp 0 0 0.0.0.0:514 0.0.0.0:*

Short of replacing syslog with something else like rsyslog or syslog-ng I can't figure out why it's not listening. Has anyone else had this problem and figured it out?

Thanks in advance!
--Aric

--------------- copy of /etc/sysconfig/syslog --------------------
# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 0 -r"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"
#
SYSLOG_UMASK=077
# set this to a umask value to use for all log files as in umask(1).
# By default, all permissions are removed for "group" and "other".
 
Old 06-27-2008, 08:04 AM   #2
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
That looks fine. syslog works over UDP so there's no 'LISTENING' going on.

Run 'netstat -pantu | grep syslog' to check.

Dave
 
Old 06-28-2008, 07:54 AM   #3
rexsky
LQ Newbie
 
Registered: Jun 2008
Posts: 4

Rep: Reputation: 0
you can try do :
netstat -ntulp | grep :514
if udp 514 is listening,may be your firewall...you can test ...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
I need help getting syslog to log remotely, this is just the regular syslog. abefroman Linux - Software 2 06-05-2008 11:36 AM
Testing message to SyslogD UDP port 514. Zepiroth Linux - Server 0 09-01-2006 12:13 AM
LXer: Centralized Syslog Server Using syslog-NG LXer Syndicated Linux News 0 04-28-2006 06:21 PM
D-Link DI-514 bford Linux - Networking 0 03-05-2005 01:13 PM
port 520 and 514. SHould I block these ports? cevjr Linux - Security 1 05-11-2004 12:57 PM


All times are GMT -5. The time now is 07:17 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration