A syslog question. I have machine A, which is running a firewall. All logs from A are being sent to machine B for logging (using UDP 514 and local3). On machine B the logs are being saved and rotated. The behaviour I'd like to change is that when looking in the logs, I see two timestamps. One from the firewall, this is the timestamp I use when complaining to ISPs. And another timestamp from when the logitem arrive at machine B, example: Jan 12 09:40:02 firewall: Jan 12 09:39:59.429844 rule 21/0(match) The first timestamp is from machine B and the second from machine A. Is there any way I can remove the first timestamp from the log ? Or is the only solution to run som post-log handling ? Looking in the manpages there doesn't seem to be any way of not having timestamping in the syslog... Thanks in advance. -- Anders Jarnberg in Stockholm, Sweden running SusE 8.1 Pro with KDE and listening to Massinova with xmms...