amk pointed out that syslog may use UDP or TCP sockets.

nnorwitz · nnorwitz · commit f4cdb474b6bd · 2003-01-26T16:15:24.000Z
Update to try UDP, if that fails, try TCP.
diff --git a/Lib/logging/handlers.py b/Lib/logging/handlers.py
@@ -349,7 +349,13 @@ def __init__(self, address=('localhost', SYSLOG_UDP_PORT), facility=LOG_USER):
         self.facility = facility
         if type(address) == types.StringType:
             self.socket = socket.socket(socket.AF_UNIX, socket.SOCK_DGRAM)
-            self.socket.connect(address)
+            # syslog may require either DGRAM or STREAM sockets
+            try:
+                self.socket.connect(address)
+            except socket.error:
+                self.socket.close()
+                self.socket = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
+                self.socket.connect(address)
             self.unixsocket = 1
         else:
             self.socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
