My simple aim is to listen to UDP 514 on IP/ x /and create a text file. I really don't need to filter or define the file format as the input devise provides all date and time stamping information. I have read the doc pages on syslog-ng and then examples currently existing in syslog-ng.conf and they appear to contradict each other at times. The closest script I can come up with is # source s_udp { udp(ip(192.168.100.10) port(514); destination(d_file) }; destination d_file { file("/var/log/skot" ); }; # Could someone assist me making this work (yes I have opened UDP 514 in the suse firewall as required and can see the info in wireshark) After I can get this part to work I will later look at log rotate. Could someone also give the the command line syntax to stop and re-start the syslog-ng daemon rather than me re-starting a new session. thanks in advance Scott :'(