The problem is that it is using SOCK_DGRAM for the "type" parameter to the "socket" system call. Syslog-ng is usually configured to use SOCK_STREAM on /dev/log instead of SOCK_DGRAM.
The syslog library functions deal with this by trying to do the same thing, and if it gets EPROTOTYPE like this, then it tries SOCK_STREAM instead. Approx is giving up instead of trying SOCK_STREAM, which is incorrect behavior, as, again, some syslog daemons will use SOCK_STREAM on their sockets. The fix, therefore, is probably to change whatever code is breaking to try SOCK_STREAM if it gets EPROTOTYPE when trying to use SOCK_DGRAM on /dev/log.
pgpe8hZ72bYw9.pgp
Description: PGP signature

