I have a CentOS 5.8 machine (with regular syslog) that for some reason is listening to port 514, even though it is not started with "-r" (to receive remote syslog messages).
# netstat -tulpn | grep 514 udp 0 0 0.0.0.0:514 0.0.0.0:* 2698/syslogd
Syslog is started with only "-m 0":
ps -ef | grep syslogd root 2698 1 0 15:55 ? 00:00:00 syslogd -m 0
I have tried starting it with "-m 0 -r", just to check if there was any difference, but there is not.
This machine is a client and should only log to a central log server - it should not be listening itself.
What am I missing?
I just found this: https://bugzilla.redhat.com/show_bug.cgi?id=137205. From the last comment made in 2010, it appears this is a bug from 2004 that has still not been resolved (it has only been 8 years...)