Zimbra uses swatch to send syslog info as traps on 162. sending traps is different from polling with a tool like CR, openview, netblue, etc.