Hello snort-users ! I've got another interesting issue here: I set up syslog-ng on a solaris-2.6-box running together with the standard syslog. syslog-ng only forwards everything (/dev/log) to another loghost via tcp - this works fine. All messages are logged locally and on the remote loghost. Trying this under Linux 2.2.13, syslog and syslog-ng end up in some kind of race condition (messages are spread between them). Is there any way to get these two working at the same time like under solaris ? -- < Gero Krueger | DeTeCSM > < Tel. : +49-541-333-2488 | IVS Osnabrueck > < Fax : +49-541-333-2940 | Hannoversche Str. 6-8 > < mailto: krueger@obk.telekom.de | 49084 Osnabrueck >