I just upgraded to 1.3.6 and i am getting a syntax error on my source line. this is what i have in my conf source s_all { unix-stream("/dev/log" max-connections(10)); udp(); tcp(); }; did something change and i missed it? or did i fubar this source line? Chris Scheller Network One Internet, inc. http://www.networkone.net/ System/Network Administration 1.888.GOT-NET1