The router is a Cisco 1941W running IOS 15.1

The monitoring server is running latest Ubuntu

* the Cisco is set to syslog to the monitoring server and CCP tells me that syslog is enabled and 

  * it's configured to send informational(6) events to the IP of the monitoring server and 

  * I have a buffer size of 5000

* the settings->SyslogServer section of the FirewallAnalyzer is telling me that syslog is up

* sudo netstat -lptu tells me that java has the syslog port, which seems correct.

* if I check Syslog in CCP (Cisco Configuration Pro) seems to show a steady flow of Syslog events but the CCP firewall log is not showing anything. This may be because there have been no denied attempts by the firewall.  The Application security log does contany a ew entries.

but nothing seems to be coming in.  The live reports are empty.

Can someone help point me in the right direction please?

Thanks

Chris