expired. syslog-ng311 and subsequent ports use their own copy of eventlog. This is a packaging decision made by Balabit, the authors of syslog-ng.