Actually I'm using both protocols, and I get the same behavior with both.

-Patrick

Sent: Mon Oct 03 2011 07:55:46 GMT-0600 (MST)
From: Clayton Dukes <cdukes@gmail.com>
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>
Subject: Re: [syslog-ng] Error in documentation on syslog() source port

Are you by chance using tcp? If so, the default is 601:
http://www.ietf.org/rfc/rfc3195.txt

______________________________________________________________

Clayton Dukes
______________________________________________________________

On Sun, Oct 2, 2011 at 9:44 PM, Patrick H. <syslogng@feystorm.net> wrote:

The syslog-ng admin guide for 3.2 says the default port for syslog() sources is 514. This isnt the observed behavior. When a syslog() source is configured without specifying the port, it listens on 601

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq