LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-25-2012, 05:05 PM   #1
sam_nyc
Member
 
Registered: Aug 2009
Posts: 41

Rep: Reputation: 1
rsyslog is not listening on port 514


Hi,

Need some help with Rsyslog. I am on CentOS version 5.7. For syslog I am using Rsyslog, it came with CentOS.

when I do
Code:
netstat -alnp |grep 514
nothing

I did restart rsyslog services. Is anything I am missing?
I also have /etc/sysconfig/syslog configured.

Thanks
 
Old 05-25-2012, 05:18 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,361
Blog Entries: 55

Rep: Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547
A few comments:
Quote:
Originally Posted by sam_nyc View Post
I am on CentOS version 5.7.
Centos is at 5.8 now, not 5.7. Staying up to date means staying safe(r).


Quote:
Originally Posted by sam_nyc View Post
I also have /etc/sysconfig/syslog configured.
Yes, but you don't show what you've configured. If "-r514" is commented out then it won't listen. If "$ModLoad imudp" and "$ModLoad imtcp" are commented out in /etc/rsyslog.conf then it won't listen. Finally Rsyslog comes with a debug flag (and a RSYSLOG_DEBUG env var). Maybe the verbose information shown hold clues.
 
Old 05-29-2012, 10:57 AM   #3
sam_nyc
Member
 
Registered: Aug 2009
Posts: 41

Original Poster
Rep: Reputation: 1
output from /etc/rsyslog

Code:
# Options to syslogd
# -m 0 disables 'MARK' messages.
# -rPortNumber Enables logging from remote machines. The listener will listen to the specified port.
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 0"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
#    once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"

I don't see "$ModLoad imudp" and "$ModLoad imtcp"


On the rsyslog, just add -r514? Should I remove syslog file? I currently have the syslog configured because I was not able to get the rsyslog working on Friday. Please advice.
 
Old 05-29-2012, 12:04 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,361
Blog Entries: 55

Rep: Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547
Quote:
Originally Posted by sam_nyc View Post
output from /etc/rsyslog
No, that's /etc/sysconfig/syslog.


Quote:
Originally Posted by sam_nyc View Post
I don't see "$ModLoad imudp" and "$ModLoad imtcp"
Add it to your /etc/rsyslog.conf


Quote:
Originally Posted by sam_nyc View Post
On the rsyslog, just add -r514?
Add the line to the SYSLOGD_OPTIONS in /etc/sysconfig/syslog.


Quote:
Originally Posted by sam_nyc View Post
Should I remove syslog file?
Not unless stock Rsyslog RPM sources a different file.
 
Old 01-03-2014, 01:14 AM   #5
abyvarghes
LQ Newbie
 
Registered: Dec 2012
Posts: 4

Rep: Reputation: Disabled
Quote:
Originally Posted by unSpawn View Post
No, that's /etc/sysconfig/syslog.



Add it to your /etc/rsyslog.conf



Add the line to the SYSLOGD_OPTIONS in /etc/sysconfig/syslog.



Not unless stock Rsyslog RPM sources a different file.
Thank a lot ..You saved my day..
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SFTP server port blocked on Uni network, need to change the listening port. sammyboy161 Linux - Newbie 2 10-21-2010 01:03 PM
Send a UDP Syslog packet with Source Port set to 514 fjkum Programming 1 01-26-2010 04:53 PM
Testing message to SyslogD UDP port 514. Zepiroth Linux - Server 0 09-01-2006 01:13 AM
port 520 and 514. SHould I block these ports? cevjr Linux - Security 1 05-11-2004 01:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 05:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration