Hello. I would like to ask two questions. 1. There is some strange difference between examples and documentation. In reference there is written that /proc/kmsg is file, but in all examples I found it is pipe. What is it pipe or a file in Linux (2.6)? 2. Proc is deprecated in linux kernel 2.6. What is the substitution for /proc/kmsg from the point of kernel logging? BTW. There is a small bug in reference manual. Example 3-9. Using the tcp() is broken and is not working. I think it should look like: destination d_tcp { tcp("10.1.2.3" port(1999) localport(999)); }; instead of: destination d_tcp { tcp("10.1.2.3" port(1999); localport(999)); }; A least this works for me. And on pages of reference manual link on "Note" picture is broken. :) Thank you for your attention, Peter.