The problem entries are only coming from that source. If another system forwards any kernel logs, they come through fine. All other boxes are currently still running the standard syslogd + klogd. The central log server is the only one running syslog-ng. --- Dustin D. Trammell Information Security Specialist Penson Financial Services, Inc. -----Original Message----- From: Stephen Frost [mailto:sfrost@snowman.net] Sent: Wednesday, August 21, 2002 12:20 To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng][PATCH] please test: syslog-ng message mangling fi x * Dustin Trammell (DTrammell@PENSON.COM) wrote:

source s_kernel { file("/proc/kmsg" log_prefix("kernel: ")); };

Okay, and those kernel messages are being generated from this source, or are they coming from another machine and being delivered to the log server? Stephen