<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <font face="Helvetica, Arial, sans-serif">Hi, <br>
      <br>
      It show me that it's a syslog-ng ... i have done this before i
      have not mention in the post. The port is used by Syslog-ng. <br>
      <br>
      <b>netstat -antp | grep 6514</b><b><br>
      </b><b>tcp        0      0 0.0.0.0:6514           
        0.0.0.0:*               LISTEN      15632/syslog-ng</b><b><br>
      </b><br>
      <b><br>
      </b><b>type syslog-ng</b><b><br>
      </b><b>syslog-ng is hashed (/sbin/syslog-ng)<br>
        <br>
        /sbin/syslog-ng -V<br>
        syslog-ng 3.8.0alpha0<br>
        Installer-Version: 3.8.0alpha0<br>
        Revision: <br>
        Module-Directory: //usr/lib64/syslog-ng<br>
        Module-Path: //usr/lib64/syslog-ng<br>
        Available-Modules:
confgen,afuser,afprog,graphite,dbparser,sdjournal,kvformat,disk-buffer,affile,cef,pseudofile,csvparser,afamqp,basicfuncs,afsocket,syslogformat,date,json-plugin,linux-kmsg-format,cryptofuncs,system-source,afstomp,afmongodb<br>
        Enable-Debug: off<br>
        Enable-GProf: off<br>
        Enable-Memtrace: off<br>
        Enable-IPv6: on<br>
        Enable-Spoof-Source: on<br>
        Enable-TCP-Wrapper: on<br>
        Enable-Linux-Caps: off<br>
        <br>
        /sbin/syslog-ng -V<br>
        syslog-ng 3.8.0alpha0<br>
        Installer-Version: 3.8.0alpha0<br>
        Revision: <br>
        Module-Directory: //usr/lib64/syslog-ng<br>
        Module-Path: //usr/lib64/syslog-ng<br>
        Available-Modules:
confgen,afuser,afprog,graphite,dbparser,sdjournal,kvformat,disk-buffer,affile,cef,pseudofile,csvparser,afamqp,basicfuncs,afsocket,syslogformat,date,json-plugin,linux-kmsg-format,cryptofuncs,system-source,afstomp,afmongodb<br>
        Enable-Debug: off<br>
        Enable-GProf: off<br>
        Enable-Memtrace: off<br>
        Enable-IPv6: on<br>
        Enable-Spoof-Source: on<br>
        Enable-TCP-Wrapper: on<br>
        Enable-Linux-Caps: off<br>
        <br>
      </b>So i have no other idea to see what is in the background...<br>
      <br>
      Kind regards<br>
      Ivan<br>
    </font><br>
    <div class="moz-cite-prefix">On 04/21/2016 12:00 PM, Scheidler,
      Balázs wrote:<br>
    </div>
    <blockquote
cite="mid:CANWQT2NhX=2uY=Bi3Zt3rxTfLtLSJkXG=0cACNwhXuhREugHWA@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>the error message clearly says that the port 6514 is
          already occupied. maybe an old instance of syslog-ng is still
          running.<br>
          <br>
        </div>
        try investigating with netstat -antp to see which process keeps
        that opened.<br>
      </div>
      <div class="gmail_extra"><br clear="all">
        <div>
          <div class="gmail_signature">
            <div dir="ltr">-- <br>
              Bazsi<br>
            </div>
          </div>
        </div>
        <br>
        <div class="gmail_quote">On Thu, Apr 21, 2016 at 11:51 AM, Ivan
          Adji - Krstev <span dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:akivanradix@gmail.com" target="_blank">akivanradix@gmail.com</a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div bgcolor="#FFFFFF" text="#000000"> <font
                face="Helvetica, Arial, sans-serif">Hi all, <br>
                I have update the syslog-ng to 3.8 ( yum remove
                syslog-ng &amp;&amp; yum install syslog-ng ) and change
                from MySQL to Mongo DB and now when i restart i have the
                following errors: <br>
                <br>
                Error binding socket; addr='AF_INET(0.0.0.0:6514)',
                error='Address already in use (98)'<br>
                I'm using mutual self certification and the certificates
                are there in the directories "ca.d"  "cert.d". Do i have
                to re-create all the certificates now or can i fix this
                somehow.<br>
                <br>
                P.S. This problem i have on the Syslog-NG Server, they
                all send messages to this server. So if i have to change
                the certificate here i will have to change on the
                clients too. :( <br>
                <br>
                Any hints on this ?<br>
              </font> </div>
            <br>
______________________________________________________________________________<br>
            Member info: <a moz-do-not-send="true"
              href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
              rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
            Documentation: <a moz-do-not-send="true"
              href="http://www.balabit.com/support/documentation/?product=syslog-ng"
              rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
            FAQ: <a moz-do-not-send="true"
              href="http://www.balabit.com/wiki/syslog-ng-faq"
              rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
            <br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>

</pre>
    </blockquote>
    <br>
  </body>
</html>