In the past I used the MSG macro to get the full syslog message. Now MSG is broken into MSG and MSGHDR. If a message comes in without a program name such as "exiting on signal 15" or "last message repeated 20 times", syslog-ng incorrectly takes the first word as the program name. Trying to rebuild it with $MSGHDR$MSG causes an erroneous : to be placed on these messages since $MSGHDR is filled in with "exiting" and "last". --- Larry Low 480.385.7045 (w) | llow@telesphere.com | www.telesphere.com 9237 E Via de Ventura | Suite 250 | Scottsdale, AZ 85258