Toolman

What port does Syslog use?

Syslog uses port 514 over UDP.

PortProtocolNameWhat it is for
514UDPSyslogRemote logging.

Exposing it

UDP syslog has no authentication and no delivery guarantee. Use TLS syslog on 6514 for anything that matters.

Checking it is listening

sudo lsof -i :514          # macOS, Linux
netstat -ano | findstr :514   # Windows
nc -zv host 514               # from elsewhere

An "address already in use" error on a port nothing appears to be holding usually means the socket is in TIME_WAIT rather than that a process has it — the ports reference covers that and the ephemeral range.

Frequently asked questions

What port does Syslog use?

Syslog uses port 514 over UDP. Remote logging.

Is port 514 safe to expose to the internet?

UDP syslog has no authentication and no delivery guarantee. Use TLS syslog on 6514 for anything that matters.

How do I check whether Syslog is listening?

sudo lsof -i :514 on macOS or Linux, netstat -ano | findstr :514 on Windows. From another machine, nc -zv host 514 says whether anything answers.

Other services

Port 514 in full · Every service · All port numbers