[rsyslog-notify] Forum Thread: Re: OMUDPSPOOF and libnet error - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24462#p24462

Message: 
----------
do any of the included files in /etc/rsyslog.d include privdrop?

for some distros this is a out of the box standard config item

I think that when you run in debug mode it disables priv drop since you are
still reporting to the console

what distro are you running? This could be a SELinux issue if you are
running it.

This is saying that libnet was refused permission to bind to the socket as
some other IP source address. This normally requires root privileges (thus
the error message), but if you have additional lockdowns in place, they
could be blocking it as well.

David Lang