https://bugzilla.balabit.com/show_bug.cgi?id=100

           Summary: Hostnames that start with 4+ digits mess up the time
                    system
           Product: syslog-ng
           Version: 2.0.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi@balabit.hu
        ReportedBy: D.Ojalvo@f5.com
Type of the Report: ---
   Estimated Hours: 0.0


Created an attachment (id=26)
 --> (https://bugzilla.balabit.com/attachment.cgi?id=26)
My patch proposal

If syslog is handling a message with an rfc 3164-type timestamp then a hostname that begins with 4 digits, 
the time parser will mess up because it thinks that it is dealing with a linksys-style timestamp that includes the year,
when the rfc3164 timestamp does not. I wrote a patch that adds a strict rfc3164 parsing option to the syslog startup.