I've noticed on my CentOS 5.x system that outbound syslog traffic (UDP) doesn't show up in
I've even tried stuff like
watch -n .1 'netstat -l -u -n --program' to make sure I don't miss it. Nada.
Yet I do see the traffic when running
tcpdump port 514 -s 0 -vvv
Why is that?