How can I change the default syslog port?

Created on 2000-March-02 by Rainer Gerhards.

We would like to pass EventReporter messages through a firewall. For security reasons, we do not like to open the standard syslog port on the firewall. Is there any way to have EventReporter use a different port? We also would like to know which exact protocol EventReporter uses, so that we can fully configure the firewall.

EventReporter supports the standard syslog protocol. This is port 514 via  UDP. The product uses standard socket calls to retrieve the port number. As such, you can configure the port via etc/services (usually stored at "c:\winnt\system32\drivers\etc" under Windows NT / 2000). Search for "syslog".  The udp entry holds the port number. If you change that number and restart EventReporter, it will use the new value. Please note that you also need to reconfigure your syslog daemon, as it otherwise expects messages to arrive on port 514.

Do you want to receive syslog in a Windows environment? Take a look at WinSyslog!

Receive, process and store your syslog data from routers, firewalls or linux/unix servers with this easy to configure application in your Windows environment. Troubleshoot network problems or be alerted, all quickly and easily.

Take a Quick Tour to WinSyslog to know more about its exciting features or directly download the free and full-featured 30 day trial version.