/var/log/messages are printing to the screen.. ..Huh?

[Steven M. Klass]

-Danka Schon!

After looking into the problem I realized one small mistake..   I made a 
change to my firewall script and decided to reboot my machine.  Rebooting is 
what killed my logs.  In February with a rash of Bind problems I switched to 
DJBDNS.  I never rebooted only killed and removed named.  I forgot that 
syslogd had the -a /chroot/named/var appended to it.  Thus with a reboot it 
couldn't figure it out, and just wouldn't start..  Doh..

Thanks again

Steven

On Monday 23 April 2001 10:46, you wrote:
> Am 23. Apr, 2001 schwäzte Steven M. Klass so:
> > 	So this weekend I noticed my log files have mysteriously shifted
> > from /var/log/messages to screen 1.  Well I looked at the logs and it
> > appears to have happened on friday afternoon.  So, I want to know how
> > do I get them back to where they belong.  I think this is a bigge
> > problem, because this shouldn't just happen.
>
> Did you change anything on Fri? Update anything? If not, please check the
> integrity of your system. Log files don't just suddenly start showing up
> somewhere else...
>
> Where they go is determined by /etc/syslog.conf.
>
> > 	As a second question how do you flush a log file correctly, so
> > it will start using it.
>
> ? Not quite certain what your asking. If you want syslog to start using
> the file again make sure there is a correct entry in /etc/syslog.conf and
> HUP syslog, e.g. "kill -HUP `cat /var/run/syslogd.pid`". "-HUP" is english
> for "-1", e.g. 'HANGUP'.
>
> If the log file appears to be corrupt, then move it out of the way (
> retains the info, so you can refer to it later ), create a new file of the
> same name with proper perms, then HUP syslog.
>
> -rw-r-----    1 root     adm          2769 23.04 10:31 /var/log/messages
>
> That's on debian. Other dists might prefer a different group and different
> perms. Doesn't matter for usability and the security differences are
> actualy minor as well.
>
> mv /var/log/messages /var/log/messages.19Apr2001
>
> >/var/log/messages
>
> chmod 0640 /var/log/messages
> kill -HUP `cat /var/run/syslogd.pid`
>
> I like to datestamp files I save in the filename, hence the 19Apr2001
> tacked on the end of the above.
>
> ciao,
>
> der.hans

-- 

Steven M. Klass
Physical Design Engineering Manager

Andigilog Inc.
7404 W. Detroit Street, Suite 100
Chandler, AZ 85226
Ph: 480-940-6200 ext. 18
Fax: 480-940-4255

sklass@andigilog.com
http://www.andigilog.com