you cannot 'simulate' a kernel message with logger. every 'non really' kernel message will change it's priority with the standard one of 13 ( that's why appear as 'user' ) That's all, it's not a syslog-ng matter, and the message really coming from the kernel will be treated as you define in your configuration. Amodiovalerio Verde