I configured syslog-ng to pass messages to SEC via named pipes. When I did I saw in the log statistics: Jan 13 09:10:00 syslog-ng[13736]: Log statistics; dropped='pipe(sec- pipe)=1607', dropped='unix-dgram(AF_UNIX(/dev/log))=0', processed='center(queued)=1794661', processed='center (received)=1718990', I then called SEC using the 'program' option instead of named pipes and I got: Jan 13 10:14:13 syslog-ng[14031]: Log statistics; dropped='program (/usr/local/bin/sec.pl -input="-" -conf=/usr/local/etc/my-sec.conf)=0', dropped='unix-dgram(AF_UNIX(/dev/log))=0', processed='center (queued)=2552863', processed='center(received)=2447130', The drops were zero but the queued and received were not equal. Does this mean messages are getting dropped? When I don't call SEC at all I get queued and received to be equal: Jan 14 09:26:44 syslog-ng[14119]: Log statistics; dropped='unix-dgram (AF_UNIX(/dev/log))=0', processed='center(queued)=70516726', processed='center(received)=70516726', -- Mike Rykowski NU-IT Telecommunications and Network Services