<div>Hi, </div>
<div> </div>
<div>No other services are runnign at that port...</div>
<div>when i give just </div>
<div> udp();</div>
<div>instead of </div>
<div> udp(ip("xxx.xxx.xxx.xxx") port(514));</div>
<div> </div>
<div>it works, means i can restart syslog service///</div>
<div><br><br> </div>
<div class="gmail_quote">On Wed, Apr 14, 2010 at 3:57 PM, Zoltán Pallagi <span dir="ltr"><<a href="mailto:pzolee@balabit.hu">pzolee@balabit.hu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div text="#000000" bgcolor="#ffffff">Hi,<br><br>Another application is listening on the udp 514 port, that's why syslog-ng cannot bind on it.<br>You should stop this application before starting syslog-ng.<br><br><span><span title="tipikusan" style="BACKGROUND-COLOR: rgb(255,255,255)">typically, it is the rshd on the most platforms. You can check it with lsof (lsof -i udp:514) or netstat (for more details see my blog: <a href="http://pzolee.blogs.balabit.com/2010/03/troubleshooting-on-linux-best-practices.html" target="_blank">http://pzolee.blogs.balabit.com/2010/03/troubleshooting-on-linux-best-practices.html</a>)<br>
<br></span></span>abhay singh wrote:
<blockquote type="cite">
<div>
<div></div>
<div class="h5">
<div>Hi All<br clear="all"></div>
<div>I am configuring syslog-ng confile to receive logs from different m/c of network.</div>
<div>I have added these in my syslog-ng.conf file</div>
<div>source s_external {<br> udp(ip("xxx.xxx.xxx.xxx") port(514));</div>
<div>};</div>
<div>destination s_external { file("/mydir/syslogs/$HOST_syslog.log" \<br> owner(user) group(group) perm(0600) dir_perm(0700) create_dirs(yes)); </div>
<div>};</div>
<div> </div>
<div>log { source(s_external); destination(s_external); };</div>
<div> </div>
<div>Also made entry in iptable </div>
<div>iptables -A INPUT -p udp -i eth1 -s xxx.xxx.xxx.xxx -d yyy.yyy.yyy.yyy --dport 514 -j ACCEPT<br></div>
<div> </div>
<div>When i restart syslog service it gives this error</div>
<div> /etc/init.d/syslog restart<br>Shutting down syslog services done<br>Re-Starting syslog servicesio.c: bind_inet_socket() bind failed xxx.xxx.xxx.xxx:514 Cannot assign requested address<br>
Error initializing configuration, exiting.<br><a>\\startproc</a>: exit status of parent of /sbin/syslog-ng: 1 failed</div>
<div> </div>
<div> </div>
<div>What is wrong in this?</div>
<div>-- <br>Regards..<br>Abhay Singh..<br></div></div></div><pre><hr width="90%" size="4">
______________________________________________________________________________
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a>
</pre></blockquote><br><br><pre cols="72">--
pzolee
</pre></div></blockquote></div><br><br clear="all"><br>-- <br>Regards..<br>Abhay Singh..<br>91-98804-55587<br>Sr. Software Engineer.<br>Robust Designs India Pvt Ltd.<br>Bangalore<br>