ok I wrote so:

source src {
       
        internal();
        udp(ip(10.102.4.1));
        unix-dgram("/dev/log");
};


then
linux-fxot:/dev # service syslog restart
Shutting down syslog services                                         done
Starting syslog servicesio.c: bind_inet_socket() bind failed 10.102.4.1:514 Cannot assign requested address
Error initializing configuration, exiting.
startproc:  exit status of parent of /sbin/syslog-ng: 1
                                                                      failed



-----Original Message-----
From: syslog-ng-bounces@lists.balabit.hu on behalf of Jason Qualkenbush
Sent: Thu 5/24/2007 3:57 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] logging from Cisco

On 5/24/07, Grigoreva, Yelena <Yelena.Grigoreva@detecon.com> wrote:
>  #source my_source {
>  #               # udp();
>  #                udp(ip("10.102.4.1")port(514));
>  #        };

You are going to need to have a source other than internal to receive
messages from the network.

source net { udp(ip(10.102.4.1) ); };
_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html