Red Hat

CentOS 5.7, sysklogd 1.4.1-46

I added "-r" to /etc/sysconfig/syslog and restarted the syslog service. With tcpdump, I can see that other devices are sending traffic to UDP 514, but nothing is showing up in /var/log/messages, which is where Googling suggests they'll end up without changing /etc/syslogd.conf I'm not finding any other troubleshooting pointers... by all indications, it's supposed to "just work" at this point. Any ideas?

Have you altered your iptable ruleset to permit traffic on UDP port 514?

iptables is not running, and tcpdump is seeing traffic destined for UDP 514

---------- Post updated at 10:24 AM ---------- Previous update was at 07:13 AM ----------

Running under the assumption that maybe sysklogd just sucks too much for this to work, I installed rsyslog 3.22.1-3 from the CentOS DVD and configured it. And I'm seeing the same issue... logs from remote devices just aren't being written.

I'm clearly missing something, but every piece of documentation and every post I can find that has anything to do with this assumes that everything just works perfectly at this point. What else could possibly be involved here???