irlue to send the logs to remote server using port number will use which protocol by default TCP/UDP

Below is the output from F5 using

tcpdump -lnni 0.0 udp and host x.x.x.x and port 518

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes

07:48:13.244408 IP x.x.x.x.56996 > x.x.x.x.518: UDP, length 145

07:48:13.286717 IP x.x.x.x.12251 > x.x.x.x.518: UDP, length 144

07:48:13.512914 IP x.x.x.x.3040 > x.x.x.x..518: UDP, length 144

tcpdump -lnni 0.0 udp and host x.x.x.x and port 514

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes

07:48:37.546228 IP x.x.x.x.53789 > x.x.x.x..514: SYSLOG local0.info, length: 144

07:48:37.548936 IP x.x.x.x.2972 > x.x.x.x.514: SYSLOG local0.info, length: 144

I will do a tcpdump on remote server