Hi, I was pointed to a Gentoo syslog-ng bugreport, which shows some interesting time travel: https://bugs.gentoo.org/show_bug.cgi?id=533328 My guess is, that it's something virtualisation related, but even if so, the report says that downgrading to 3.4 solved the problem. Anybody ran into something similar? Bye, Peter Czanik (CzP) <peter.czanik@balabit.com> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/ https://twitter.com/PCzanik