Inputs - UDP

Previous  Top  Next

Normally a Syslog Daemon listens on port 514 for UDP Syslog messages. If you want to listen on a different port for Syslog messages, you can enter any port value from 1 though to 65535. If you change the port from 514, the device sending the Syslog message must also be able to support the alternate port number.

If you would like to stop Syslog Daemon from listening for UDP Syslog messages, simply uncheck the Listen for UDP Syslog messages checkbox. This version of Kiwi Syslog Daemon can only listen for messages on a single UDP port at once. Future versions will be able to listen to multiple UDP ports simultaneously.

Bind to Address:
By default, the UDP socket will listen for messages on all connected interfaces. If you want to limit the binding to a single specific interface, you can specify the IP address in the Bind to address field. Otherwise, leave this field blank. (If the Bind to address field is left blank, it will listen on all interfaces. This is the best option in most cases.)
For example, if you have two non routed interfaces on the computer, 192.168.1.1 and 192.168.2.1, then you can choose to bind to only the 192.168.1.1 interface. This will ignore any syslog messages sent to the other interface.

Data Encoding:
If you are receiving messages from systems that use different data encoding formats, you can specify the decoding method to apply to the incoming data. The default is to use the System code page.

The drop down list allows you to select some commonly used encoding formats. To select a different encoding, choose "Other-->" and then enter the code page number into the field on the right.

The various code pages available on most Windows systems can be found at:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/act/htm/actml_ref_scpg.asp

Here are some common code page numbers that can be used:

Name	Code Page Number	Description
System	1	System Code Page
ANSI	0	ANSI
UTF-8	65001	Unicode Transformation Format 8
Shift-JIS	932	Japanese
EUC-JP	51932	Japanese Extended Unix Code
BIG5	950	Traditional Chinese
Chinese	936	Simplified Chinese

Please note: If the number you specify is not a valid Code Page on your system, the incoming data will not be decoded correctly and will be dropped.

If in doubt, use UTF-8 encoding (65001) as it will handle all Unicode characters.

For more information on Unicode and UTF-8, please see:
http://en.wikipedia.org/wiki/UTF-8