Hello folks, I traced this a bit further, and it seems as if syslog-ng treats "last message repeated xtime(s)" messages from the sun-syslogd as if they came from a seperate machine. As I wrote/pasted in my previous mail messages are forwarded via udp to an other machine and there sorted. Depending on the facility of the previous error message it's saved to various files (last-warn, last-crit, etc.). I'm going to run the syslog-ng on the sun (sunos5.8) during the next couple of days, I hope to get the problem fixed by this way. -- Regards, Wiktor Wodecki, Unix Administration | Wapme-Systems AG Tel.: +49-211-748450 | Muensterstrasse 248 Fax: +49-211-74845176 | 40470 Duesseldorf E-Mail: wodecki@wapme-systems.de | http://www.wapme-systems.de GnuPG-Fingerprint: 1024/E22253B9 084C79504D650E9246D148AFF3F73201E22253B9