Syslog Files Doubt

[Bruno Vilardo]

Hello All,

I have check two files /dev/klog and /dev/log , these 2 files have old dates.
Shouldn´t they have the same date as the /syslog.dated/current directory ?

When i try ps -ef |grep syslog it posts :
ps -ef | grep syslog
root 191 1 0.0 Feb 24 ?? 1:30.38 /usr/sbin/syslogd
root 14107 11854 0.0 07:43:37 ttyp6 0:00.00 grep syslog

Thanks a lot
Bru

[Bruno Vilardo]

why Feb 24 ??? what does that mean ? isnt´t the syslog started ?

Thanks
Bru

[Ralf Puchner · Accepted solution]

Bruno,

have a look into the man-page explaining the single rows....

[Michael Schulte zur Sur]

Hi,

a simple ps -ef with a look at the col description should answer the problem.
A Ralf says: Look man pages of command you use.

greetings,

Michael

[Johan Brusche]

Bruno,

Below system was booted on Feb23 aro 12:22,
Each 24 hours the syslogd receives a HUP signal and that moment it creates a new "current" directory (see the kill -HUP below)

# ps -ef | grep -e PID -e syslog | grep -v grep
USER PID PPID %CPU STARTED TT TIME COMMAND
root 139 1 0.0 Feb 23 ?? 0:01.11 /usr/sbin/syslogd
# ls -l /dev/*log*
-rw-r--r-- 1 root system 1442 Dec 19 2000 /dev/MAKEDEV.log
srw-rw---- 1 root system 0 Feb 23 12:22 /dev/binlogdmb
crw------- 1 root system 31, 0 Mar 22 18:51 /dev/kbinlog
crw------- 1 root system 3, 0 Dec 19 2000 /dev/klog
srw-rw-rw- 1 root system 0 Feb 23 12:22 /dev/log
# ls -ld /var/adm/syslog.dated/current
lrwxr-xr-x 1 root adm 12 Mar 22 12:23 /var/adm/syslog.dated/current -> 22-Mar-12:23
# kill -HUP 139
# ls -ld /var/adm/syslog.dated/current
lrwxr-xr-x 1 root adm 12 Mar 22 18:56 /var/adm/syslog.dated/current -> 22-Mar-18:56
# date
Mon Mar 22 18:56:49 MET 2004
#

Rgds,
Johan.