Hi! I think I have found a small bug/typo in affile.c. Here's the patch: diff -r -U3 syslog-ng-1.5.13-orig/src/affile.c syslog-ng-1.5.13-patched/src/affile.c --- syslog-ng-1.5.13-orig/src/affile.c Wed Oct 24 12:46:06 2001 +++ syslog-ng-1.5.13-patched/src/affile.c Tue Jan 29 14:21:25 2002 @@ -578,11 +578,11 @@ break; } break; + } case M_MESSAGE: { /* message */ length = append_string(dest, left, msg->msg->data, msg->msg->length, escape); break; - } } default: break; Greetings Gert