Hi,
I'm not sure if i understand the request. The syslog protocol itself doesn't support MAC address info (see e.g. RFC 5424 - The Syslog Protocol). And the software can't figure it out even from network traffic as source MAC address changes with each hop.
Regards,
Jiri