So, you imply that the imuxsock.so/imklog.so plugin connect to 10.0.0.1 and at this point the port is associated with the socket?
Daniel. On Wed, Sep 26, 2012 at 6:56 PM, Rainer Gerhards <[email protected]> wrote: > I don't think it is explicitly bound. From the config, I'd deduce that this > is a socket used for outgoing messages. > > Raienr > >> -----Original Message----- >> From: [email protected] [mailto:rsyslog- >> [email protected]] On Behalf Of Daniel Baluta >> Sent: Wednesday, September 26, 2012 4:46 PM >> To: rsyslog-users >> Subject: [rsyslog] UDP socket creation >> >> Hello guys, >> >> I am running rsyslog-5.8.12 (but I think that doesn't matter in this >> context) and I wonder >> why/where is the following socket created: >> >> udp 0 0 0.0.0.0:49152 0.0.0.0:* >> 185/rsyslogd >> >> This only happens on a mips64 platform (64 bit kernel , 32 bit >> userspace). Running rsyslogd on powerpc >> doesn't bring that UDP socket up. Is there any way to tell udp to bind >> on another port, or just specify * ? >> >> My rsyslog.conf file for both platforms looks like this >> >> $ModLoad imklog.so >> >> $ModLoad imuxsock.so >> $SystemLogRateLimitInterval 0 >> >> >> $template SyslogInternalFormat, "%timegenerated%, Syslog, >> %syslogseverity-text%, , , Syslog-channel, %msg%\n" >> $template CSVKernelFormat, "%timegenerated%, Printk, >> %syslogseverity-text%, , , Kernel-channel, %msg:::csv%\n" >> >> >> $template CSVLibFormat, "%msg:2:65535%\n" >> >> kern.err @10.0.0.1;CSVKernelFormat >> local0.err @10.0.0.1;CSVLibFormat >> >> thanks, >> Daniel. >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST >> if you DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

