[syslog-ng] some questions