Quote Balazs Scheidler <bazsi@balabit.hu>: | | I've tested the following config: | | source src { udp(port(2000)); internal(); }; | | destination dst { file("logfile"); }; | | log { source(src); destination(dst); }; | | And I can't seem to reproduce the problem I probably should have said that I'm not sending syslog messages with a syslog "forwarder" daemon nor with a standard C API, and that the messages I sent are _not_ newline terminated (they are NULL terminated though). I believe that messages send by standard syslog API (or syslog forwarder servers) are newline terminated, so I guess this is were lies the difference. If needed I can send you the perl proggie that I use to send those logs. Regards, -Thomas -- == Thomas Morin == Ingénieur Consultant Atlantide - www.ago.fr - thomas.morin@ago.fr == PGP Id:8CEA233D Key FP:503BF6CFD3AE8719377B832A02FB94E08CEA233D --