Hello, We have the following package installed on a Sun Solaris 8 machine. The syslog output for one of our CSS boxes is being recorded under a directory number 1. The rest of the devices we log are being recorded under their regular IP address. For example, an ls of our output directory looks similar to this: (note the first directory) drwxr-xr-x 2 root root 512 Jun 4 02:11 1 drwxr-xr-x 2 root root 512 Jun 4 00:00 25.75.27.148 drwxr-xr-x 2 root root 512 Jun 4 04:04 25.75.27.149 drwxr-xr-x 2 root root 512 Jun 4 00:00 25.75.27.150 drwxr-xr-x 2 root root 512 Jun 4 04:34 25.75.27.151 Have you seen that before? Is there a configuration change on the CSS that needs to be made? Thanks, Mark Kelly =========================================================================== PKGINST: SOsyslog NAME: syslog-ng CATEGORY: application ARCH: sparc VERSION: 1.5.23 VENDOR: BalaBit IT Ltd. PSTAMP: Nationwide Security Operations INSTDATE: May 14 2003 20:20 EMAIL: syslog-ng@lists.balabit.hu STATUS: completely installed FILES: 25 installed pathnames 10 shared pathnames 15 directories 3 executables 1983 blocks used (approx)