<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
Another application is listening on the udp 514 port, that's why
syslog-ng cannot bind on it.<br>
You should stop this application before starting syslog-ng.<br>
<br>
<span id="result_box" class="short_text"><span
style="background-color: rgb(255, 255, 255);" title="tipikusan">typically,
it is the rshd on the most platforms. You can check it with lsof (lsof
-i udp:514) or netstat (for more details see my blog:
<a class="moz-txt-link-freetext" href="http://pzolee.blogs.balabit.com/2010/03/troubleshooting-on-linux-best-practices.html">http://pzolee.blogs.balabit.com/2010/03/troubleshooting-on-linux-best-practices.html</a>)<br>
<br>
</span></span>abhay singh wrote:
<blockquote
cite="mid:p2x7eb4b7181004132258le102b05enefd4836589591925@mail.gmail.com"
type="cite">
<div>Hi All<br clear="all">
</div>
<div>I am configuring syslog-ng confile to receive logs from
different m/c of network.</div>
<div>I have added these in my syslog-ng.conf file</div>
<div>source s_external {<br>
udp(ip("xxx.xxx.xxx.xxx") port(514));</div>
<div>};</div>
<div>destination s_external { file("/mydir/syslogs/$HOST_syslog.log" \<br>
owner(user) group(group) perm(0600) dir_perm(0700)
create_dirs(yes)); </div>
<div>};</div>
<div> </div>
<div>log { source(s_external); destination(s_external); };</div>
<div> </div>
<div>Also made entry in iptable </div>
<div>iptables -A INPUT -p udp -i eth1 -s xxx.xxx.xxx.xxx
-d yyy.yyy.yyy.yyy --dport 514 -j ACCEPT<br>
</div>
<div> </div>
<div>When i restart syslog service it gives this error</div>
<div> /etc/init.d/syslog restart<br>
Shutting down syslog services
done<br>
Re-Starting syslog servicesio.c: bind_inet_socket() bind failed
xxx.xxx.xxx.xxx:514 Cannot assign requested address<br>
Error initializing configuration, exiting.<br>
<a moz-do-not-send="true" href="file://startproc/">\\startproc</a>:
exit status of parent of /sbin/syslog-ng: 1 failed</div>
<div> </div>
<div> </div>
<div>What is wrong in this?</div>
<div>-- <br>
Regards..<br>
Abhay Singh..<br>
</div>
<pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
pzolee
</pre>
</body>
</html>