[syslog-ng] Error binding socket UDP

Laszlo Szemere (lszemere) Laszlo.Szemere at oneidentity.com
Wed Sep 18 14:35:35 UTC 2019

 in most of the cases this can be caused by:

1. The address:port is already in use
  a) by an another application - it can be syslog-ng itself, i.e.: it is started multiple times
  b) the address:port is configured multiple times in your config

2. You do not have permission to use that port.
 a) It is under 1024, so your process needs the CAP_NET_BIND_SERVICE capability. (or simply run as root)
 b) selinux restrictions

If you can rule out those common issues and unfortunately none of them help, than we will need more info from your setup to continue.


From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of William Luiz Ribeiro Vasconcelos Da Silva <wsilva_ericsson at timbrasil.com.br>
Sent: Wednesday, September 18, 2019 15:54
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] Error binding socket UDP

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.

Good Mornig Every one,

How should I to corret the problema presented in the log below:

Error binding socket; addr='AF_INET(', error='Cannot assign requested address (99)'
Set 18 10:32:14 centosServerVirtual syslog-ng[1809]: [2019-09-18T10:32:14.855778] Error initializing message pipeline; plugin_name='udp', location='/etc/syslog-ng/syslog-ng.conf:33:4'

My configuration on syslog-ng.conf is that:

source s_net {

   udp(ip( port(514));

Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada para recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor nos informe respondendo imediatamente a este e-mail e delete o seu conteúdo.

This message, including its attachments, may contain privileged or confidential information, and it must not be fowarded without the express authorization of the sender. If you are not the intended recipient, we hereby inform you that the use, disclosure, copy or filing are forbidden. So, if you received this message as a mistake, please inform us by answering this e-mail and deleting its contents

Questo messaggio, inclusi gli allegati, potrebbe contenere informazioni privilegiate e/o riservate, e non deve essere ritrasmesse senza l'autorizzazione del mittente. Se non siete il destinatario o la persona autorizzata a riceverlo, informiamo che il suo utilizzo, diffusione, copia o archiviazione sono proibite. Quindi, se avete ricevuto questo messaggio per errore, per cortesia ci informi rispondendo immediatamente a questa email e cancelli il suo contenuto

More information about the syslog-ng mailing list