Odd syslog-ng problem