[syslog-ng]Difficulty with source(net) on Solaris 8 [syslog-ng-1.5.9]

[Brad Arlt]

On Mon, Sep 17, 2001 at 01:44:14PM -0700, Ken Paris wrote:
> source s_local { sun-streams("/dev/log" door("/etc/.syslog_door")); };
> source s_int { internal(); };
> source s_net_udp { udp(); };
> destination d_local { file("/var/log/default"); };
> destination d_int { file("/var/log/internal"); };
> log { source(s_local); source(s_net_udp); destination(d_local); };
> log { source(s_int); destination(d_int); };

I could be crazy, or need to look at documentation, but I think udp()
needs a port number.

source s_net_udp { udp(port(514)); };

might work better for you.  This is the only real difference I see
between my config and yours (asside from cosmetic).  A deeper analysis
would require thought, and looking at the truss output, and it is too
late for either things.
----------------------------------------------------------------------------
   __o		Bradley Arlt	  Email: arlt@cpsc.ucalgary.ca         o__
 _ \<_				    WWW: www.acs.ucalgary.ca/~bdarlt   _>/ _
(_)/(_)  -Eat well, sleep peacefully, drink lots, and ride like hell. (_)\(_)