On Mon, Jun 4, 2012 at 12:11 PM, Fekete Robert <frobert@balabit.hu> wrote:
Hi, do you use the source in a log statement? Is syslog-ng really listening on the specified port?
Robert
Yes, here it is: source s_ietfsyslog { syslog(ip(172.24.50.2) port(20514) transport(tcp)); }; log { source(s_ietfsyslog); destination(d_ietflog); flags(flow-control,final); }; Yes, it is listening: Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1166/sshd tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1131/master tcp 0 172.24.50.2:20514 0.0.0.0:* LISTEN 1406/syslog-ng