topic Syslog Files Doubt in Operating System - Tru64 Unix

Syslog Files Doubt

Bruno Vilardo — Mon, 22 Mar 2004 05:47:10 GMT

Hello All,

I have check two files /dev/klog and /dev/log , these 2 files have old dates.
ShouldnÂ´t they have the same date as the /syslog.dated/current directory ?

When i try ps -ef |grep syslog it posts :
ps -ef | grep syslog
root 191 1 0.0 Feb 24 ?? 1:30.38 /usr/sbin/syslogd
root 14107 11854 0.0 07:43:37 ttyp6 0:00.00 grep syslog

Thanks a lot
Bru

Re: Syslog Files Doubt

Bruno Vilardo — Mon, 22 Mar 2004 05:49:15 GMT

why Feb 24 ??? what does that mean ? isntÂ´t the syslog started ?

Thanks
Bru

Re: Syslog Files Doubt

Ralf Puchner — Mon, 22 Mar 2004 07:07:23 GMT

Bruno,

have a look into the man-page explaining the single rows....

Re: Syslog Files Doubt

Michael Schulte zur Sur — Mon, 22 Mar 2004 10:47:43 GMT

Hi,

a simple ps -ef with a look at the col description should answer the problem.
A Ralf says: Look man pages of command you use.

greetings,

Michael

Re: Syslog Files Doubt

Johan Brusche — Mon, 22 Mar 2004 13:09:06 GMT

Bruno,

Below system was booted on Feb23 aro 12:22,
Each 24 hours the syslogd receives a HUP signal and that moment it creates a new "current" directory (see the kill -HUP below)

# ps -ef | grep -e PID -e syslog | grep -v grep
USER PID PPID %CPU STARTED TT TIME COMMAND
root 139 1 0.0 Feb 23 ?? 0:01.11 /usr/sbin/syslogd
# ls -l /dev/*log*
-rw-r--r-- 1 root system 1442 Dec 19 2000 /dev/MAKEDEV.log
srw-rw---- 1 root system 0 Feb 23 12:22 /dev/binlogdmb
crw------- 1 root system 31, 0 Mar 22 18:51 /dev/kbinlog
crw------- 1 root system 3, 0 Dec 19 2000 /dev/klog
srw-rw-rw- 1 root system 0 Feb 23 12:22 /dev/log
# ls -ld /var/adm/syslog.dated/current
lrwxr-xr-x 1 root adm 12 Mar 22 12:23 /var/adm/syslog.dated/current -> 22-Mar-12:23
# kill -HUP 139
# ls -ld /var/adm/syslog.dated/current
lrwxr-xr-x 1 root adm 12 Mar 22 18:56 /var/adm/syslog.dated/current -> 22-Mar-18:56
# date
Mon Mar 22 18:56:49 MET 2004
#

Rgds,
Johan.