Just installed tcpspy and syslog-ng in grml-medium and worked like expected.
It works for me and i'll close the topic.

If you have any further details just reopen it.