Great - though I recommend TCP or as is preferred by Rainer RELP as the protocol to ensure there are no losses. UDP syslog is a really antiquated notion these days. :P Greg