Ok, that's strange... apparently the patch didn't apply correctly (according to the output of that tail command), even though the output from patch appeared that it did; It still had the old code in sources.c. I re-applied the patch, verified that the source was indeed patched this time, and recompiled. After a bit of testing, I don't seem to be getting the truncated entries any more, so I'm guessing it was just an error on my part during the patching and re-compiling process. Thanks for your help in debugging (: I hadn't even thought to actually look at the source for the original problem since it had appeared that the patch applied correctly. --- Dustin D. Trammell Information Security Specialist Penson Financial Services, Inc. -----Original Message----- From: Stephen Frost [mailto:sfrost@snowman.net] Sent: Wednesday, August 21, 2002 13:40 To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng][PATCH] please test: syslog-ng message mangling fi x Hmm, odd, I'm not having any problems here.. Can you go into the syslog-ng-1.5.19 directory and run: tail +113 src/sources.c | head -10 And send the output here? Stephen