Thanks Bazsi, I wasn’t sure if it was me or syslog-ng. 
I will try and get a build server back up this week and test.. 

Do you know if Balabit has a nightly build repo to make testing easier ? 

Scot 

On Oct 16, 2016, at 6:41 AM, Balazs Scheidler <bazsi77@gmail.com> wrote:

This branch should fix your issue: https://github.com/balabit/syslog-ng/pull/1233 against current master. Some testing would be appreciated.


On Fri, Oct 14, 2016 at 7:10 PM, Scot Needy <scotrn@gmail.com> wrote:
That was terrible.

I should add that I saw this from a tcpdump.


> On Oct 14, 2016, at 10:09 AM, Scot Needy <scotrn@gmail.com> wrote:
>
> I thou dadd this was from a tcpdump capture.
>
>
>> On Oct 13, 2016, at 2:07 PM, Scot Needy <scotrn@gmail.com> wrote:
>>
>> This is strange.
>>
>>
>> All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”.  Date never changes.
>>
>>
>>
>> Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
>

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq




--
Bazsi
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq