Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Server
User Name
Linux - Server This forum is for the discussion of Linux Software used in a server related context.


  Search this Thread
Old 06-26-2008, 03:31 PM   #1
Registered: Dec 2003
Location: Issaquah, WA
Posts: 35

Rep: Reputation: 15
Syslog not binding to 514

I'm having an issue with a Centos 5 installation. I'm trying to setup the syslog on my nagios/splunk server to accept messages from other syslog servers. I've made the necessary change to the /etc/sysconfig/syslog file, adding the -r option. I've restarted the syslog daemon and even restarted the whole server, but I'm not seeing it binding to port 514.

When I do a netstat -an |grep syslog I get nothing.

If I do a netstat -an |grep 514 I get
udp 0 0*

Short of replacing syslog with something else like rsyslog or syslog-ng I can't figure out why it's not listening. Has anyone else had this problem and figured it out?

Thanks in advance!

--------------- copy of /etc/sysconfig/syslog --------------------
# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
# set this to a umask value to use for all log files as in umask(1).
# By default, all permissions are removed for "group" and "other".
Old 06-27-2008, 08:04 AM   #2
Senior Member
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
That looks fine. syslog works over UDP so there's no 'LISTENING' going on.

Run 'netstat -pantu | grep syslog' to check.

Old 06-28-2008, 07:54 AM   #3
LQ Newbie
Registered: Jun 2008
Posts: 4

Rep: Reputation: 0
you can try do :
netstat -ntulp | grep :514
if udp 514 is listening,may be your can test ...


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
I need help getting syslog to log remotely, this is just the regular syslog. abefroman Linux - Software 2 06-05-2008 11:36 AM
Testing message to SyslogD UDP port 514. Zepiroth Linux - Server 0 09-01-2006 12:13 AM
LXer: Centralized Syslog Server Using syslog-NG LXer Syndicated Linux News 0 04-28-2006 06:21 PM
D-Link DI-514 bford Linux - Networking 0 03-05-2005 01:13 PM
port 520 and 514. SHould I block these ports? cevjr Linux - Security 1 05-11-2004 12:57 PM > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 12:53 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration