[syslog-ng] mark_freq() wrong?!