<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">I have the following
results...<br>
<br>
lsof -i :6514<br>
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME<br>
syslog-ng 2411 root 12u IPv4 16262 0t0 TCP *:syslog-tls
(LISTEN)<br>
<br>
So its syslog-tls .... is it possible to have some modules
uninstalled. As i did <b>yum remove syslog-ng </b>than <b>yum
install syslog-ng</b><br>
</font><br>
<div class="moz-cite-prefix">On 04/21/2016 01:55 PM, Scot Needy
wrote:<br>
</div>
<blockquote
cite="mid:57B65E63-E7F8-4397-A1D6-07813F7D81A8@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div class="">lsof -i :6514 </div>
<div class=""><br class="">
</div>
<div class="">Will show you what process is bound to the port. </div>
<div class=""><br class="">
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Apr 21, 2016, at 7:20 AM, Ivan Adji - Krstev
<<a moz-do-not-send="true"
href="mailto:akivanradix@gmail.com" class="">akivanradix@gmail.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000" class=""> <font
class="" face="Helvetica, Arial, sans-serif">No still
same problem ... <br class="">
</font><br class="">
<div class="moz-cite-prefix">On 04/21/2016 01:04 PM,
Nirmoy Das wrote:<br class="">
</div>
<blockquote cite="mid:5718B3C1.6000105@suse.de"
type="cite" class="">
<pre class="" wrap="">try systemctl reload syslog-ng.
On 04/21/2016 12:05 PM, Ivan Adji - Krstev wrote:
</pre>
<blockquote type="cite" class="">
<pre class="" wrap="">Hi,
It show me that it's a syslog-ng ... i have done this before i have not
mention in the post. The port is used by Syslog-ng.
*netstat -antp | grep 6514**
**tcp 0 0 0.0.0.0:6514 0.0.0.0:*
LISTEN 15632/syslog-ng**
*
*
**type syslog-ng**
**syslog-ng is hashed (/sbin/syslog-ng)
/sbin/syslog-ng -V
syslog-ng 3.8.0alpha0
Installer-Version: 3.8.0alpha0
Revision:
Module-Directory: //usr/lib64/syslog-ng
Module-Path: //usr/lib64/syslog-ng
Available-Modules:
confgen,afuser,afprog,graphite,dbparser,sdjournal,kvformat,disk-buffer,affile,cef,pseudofile,csvparser,afamqp,basicfuncs,afsocket,syslogformat,date,json-plugin,linux-kmsg-format,cryptofuncs,system-source,afstomp,afmongodb
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: on
Enable-TCP-Wrapper: on
Enable-Linux-Caps: off
/sbin/syslog-ng -V
syslog-ng 3.8.0alpha0
Installer-Version: 3.8.0alpha0
Revision:
Module-Directory: //usr/lib64/syslog-ng
Module-Path: //usr/lib64/syslog-ng
Available-Modules:
confgen,afuser,afprog,graphite,dbparser,sdjournal,kvformat,disk-buffer,affile,cef,pseudofile,csvparser,afamqp,basicfuncs,afsocket,syslogformat,date,json-plugin,linux-kmsg-format,cryptofuncs,system-source,afstomp,afmongodb
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: on
Enable-TCP-Wrapper: on
Enable-Linux-Caps: off
*So i have no other idea to see what is in the background...
Kind regards
Ivan
On 04/21/2016 12:00 PM, Scheidler, Balázs wrote:
</pre>
<blockquote type="cite" class="">
<pre class="" wrap="">the error message clearly says that the port 6514 is already occupied.
maybe an old instance of syslog-ng is still running.
try investigating with netstat -antp to see which process keeps that
opened.
--
Bazsi
On Thu, Apr 21, 2016 at 11:51 AM, Ivan Adji - Krstev
<<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:akivanradix@gmail.com">akivanradix@gmail.com</a> <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:akivanradix@gmail.com"><mailto:akivanradix@gmail.com></a>> wrote:
Hi all,
I have update the syslog-ng to 3.8 ( yum remove syslog-ng && yum
install syslog-ng ) and change from MySQL to Mongo DB and now when
i restart i have the following errors:
Error binding socket; addr='AF_INET(0.0.0.0:6514)', error='Address
already in use (98)'
I'm using mutual self certification and the certificates are there
in the directories "ca.d" "cert.d". Do i have to re-create all
the certificates now or can i fix this somehow.
P.S. This problem i have on the Syslog-NG Server, they all send
messages to this server. So if i have to change the certificate
here i will have to change on the clients too. :(
Any hints on this ?
______________________________________________________________________________
Member info: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation:
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
______________________________________________________________________________
Member info: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<pre class="" wrap="">
______________________________________________________________________________
Member info: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<pre class="" wrap="">Nirmoy
</pre>
</blockquote>
<br class="">
</div>
______________________________________________________________________________<br
class="">
Member info: <a moz-do-not-send="true"
href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
class="">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br
class="">
Documentation: <a moz-do-not-send="true"
href="http://www.balabit.com/support/documentation/?product=syslog-ng"
class="">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br
class="">
FAQ: <a moz-do-not-send="true"
href="http://www.balabit.com/wiki/syslog-ng-faq" class="">http://www.balabit.com/wiki/syslog-ng-faq</a><br
class="">
<br class="">
</div>
</blockquote>
</div>
<br class="">
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<br>
</body>
</html>