"MARK" lines are printed with a timestamp one hour behind the correct local time (BST): Apr 2 05:00:01 hostname cron[15123]: (root) CMD (rm -f /var/spool/cron/lastrun/cron.hourly) Apr 2 04:20:00 hostname -- MARK -- Apr 2 05:30:01 hostname cron[15500]: (root) CMD (test -x /usr/sbin/run-crons && /usr/sbin/run-crons ) Apr 2 04:50:00 hostname -- MARK -- This started occurring after the clocks went forward to BST while I was running syslog-ng-2.0.8 and it continued to occur after restarts, reboots and an upgrade to 2.0.9 and a downgrade to 2.0.6. Reproducible: Always
You didn't include emerge --info reopen with that. Also, the output from emerge -evp syslog-ng and your /etc/syslog-ng/syslog-ng.conf file.