On Fri, Apr 05, 2019 at 03:46:37PM +0000, Lin, Victor wrote: > When use: tcpdump src host 1.3.4.5 and port 514 , I can see host 1.3.4.5 is sending the syslog to my syslog-ng > But when I search my local log special for port 514, I didn't see any syslog from 1.3.4.5 firewall?