I'm attempting to configure ESXI hosts to pass all syslog traffic to a remote host. I've configured the Syslog.global.loghost parameter to reflect the landing location of the syslog messages. My question is, what vmkernel port actually contains the syslog traffic coming from the ESXI hosts? Management, vMotion etc...? I was under the assumption this traffic is coming over the management network. We are pushing the messages to the VCenter 6 built in syslog server.