Some of my devices are logging syslog messages with 2 message IDs, for example:
Aug 11 00:04:59 router1 973182: 886901: Aug 11 00:04:58.249 EDT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet3/4 (not half duplex), with switch1 Ethernet0 (half duplex)
Of the ~800 IOS devices in my network I would say that 5% are exhibiting this behaviour (different platforms & code). All messages from a given device either have or do not have this problem.
I am assuming that this is something config related on these devices, but I can't track it down. Can anyone help? I'm just trying to standardize the syslog format to make analysis easier.