I had suspected something along these lines, but I've confirmed the misc-pid syslog-ng is accessing in /proc is the one sending the message to syslog-ng.
The real problem is this is generating so much noise in the logs that everything else is being lost. -- (\___(\___(\______ --=> 8-) EHM <=-- ______/)___/)___/) \BS ( | ehem+sig...@m5p.com PGP 87145445 | ) / \_CS\ | _____ -O #include <stddisclaimer.h> O- _____ | / _/ 8A19\___\_|_/58D2 7E3D DDF4 7BA6 <-PGP-> 41D1 B375 37D0 8714\_|_/___/5445