Which port is commonly used by Syslog messages on Unix-like systems?

Which port is commonly used by Syslog messages on Unix-like systems?

• A. 514 TCP
• B. 6514 TCP
• C. 514 UDP
• D. 515 UDP

Answer: (C)

Syslog on Unix-like systems uses a simple, low-overhead transport by default: UDP on port 514. This standard setup reflects the original design of syslog, where messages are sent without establishing a connection, accepting that some could be dropped but keeping the system lightweight for logging from many devices. While you can run syslog over TCP (and even TLS) on other ports, such as TLS-secured syslog over TCP on port 6514, those configurations are less common in default deployments. The 515 UDP option isn’t used for syslog, as it’s associated with another service.

Syslog on Unix-like systems uses a simple, low-overhead transport by default: UDP on port 514. This standard setup reflects the original design of syslog, where messages are sent without establishing a connection, accepting that some could be dropped but keeping the system lightweight for logging from many devices. While you can run syslog over TCP (and even TLS) on other ports, such as TLS-secured syslog over TCP on port 6514, those configurations are less common in default deployments. The 515 UDP option isn’t used for syslog, as it’s associated with another service.