From owner-freebsd-questions@FreeBSD.ORG Sat May 15 10:34:53 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CA07416A4CE for ; Sat, 15 May 2004 10:34:53 -0700 (PDT) Received: from mail.cyberdogtech.com (alb-24-194-111-216.nycap.rr.com [24.194.111.216]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1B25943D2F for ; Sat, 15 May 2004 10:34:48 -0700 (PDT) (envelope-from webmaster@cyberdogtech.com) Received: from CyberDogT30 by cyberdogtech.com (Cipher TLSv1:RC4-MD5:128) (MDaemon.PRO.v7.1.0.R) with ESMTP id md50000000882.msg for ; Sat, 15 May 2004 13:33:14 -0400 From: "Matt \"Cyber Dog\" LaPlante" To: "'Matthew Seaman'" , Date: Sat, 15 May 2004 13:34:03 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.5510 Thread-Index: AcQ6WoEQXjaTd17nQlyfUfA4XxuRnwARgeBw In-Reply-To: <20040515085621.GC56326@happy-idiot-talk.infracaninophile.co.uk> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 X-Authenticated-Sender: webmaster@cyberdogtech.com X-Spam-Processed: cyberdogtech.com, Sat, 15 May 2004 13:33:14 -0400 (not processed: message from valid local sender) X-MDRemoteIP: 128.113.70.246 X-Return-Path: webmaster@cyberdogtech.com X-MDaemon-Deliver-To: freebsd-questions@FreeBSD.org X-MDAV-Processed: cyberdogtech.com, Sat, 15 May 2004 13:33:16 -0400 Message-Id: <20040515173448.1B25943D2F@mx1.FreeBSD.org> Subject: RE: FreeBSD 4.7 Syslogs X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 May 2004 17:34:53 -0000 I tried the logger command, but it didn't reach the messages file (which = is still empty). Here is the output from the syslogd -d command: syslogd: bind: Address already in use logmsg: pri 53, flags 4, from , msg syslogd: bind: Address already in = use Logging to CONSOLE /dev/console syslogd: bind: Address already in use logmsg: pri 53, flags 4, from , msg syslogd: bind: Address already in = use Logging to CONSOLE /dev/console can't open /dev/klog (16) off & running.... init cfline("local7.crit;local7.err;local7.notice /var/log/purchasing", f, "*", "*") cfline("local0.* /var/log/postgres", f, "*", "*") cfline("local2.* /var/log/qmail/smtpd.log", f, "*", "*") cfline("local3.* /var/log/qmail/send", f, "*", "*") cfline("local4.* /var/log/qmail/masterlog", f, "*", "*") cfline("authpriv.* /var/log/authpriv", f, "local0", "*") cfline("security.* /var/log/security", f, "local0", "*") cfline("mail.info /var/log/maillog", f, "local0", "*") cfline("lpr.info /var/log/lpd-errs", f, "local0", "*") cfline("cron.* /var/log/cron", f, "local0", "*") cfline("*.emerg *", f, "local0", "*") cfline("console.info /var/log/console.log", f, "local0", "*") X X X X X X X X X X X X X X X X X X X X X X X 5 X FILE: = /var/log/purchasing X X X X X X X X X X X X X X X X 8 X X X X X X X X FILE: = /var/log/postgres X X X X X X X X X X X X X X X X X X 8 X X X X X X FILE: /var/log/qmail/smtpd.log X X X X X X X X X X X X X X X X X X X 8 X X X X X FILE: = /var/log/qmail/send X X X X X X X X X X X X X X X X X X X X 8 X X X X FILE: /var/log/qmail/masterlog X X X X X X X X X X 8 X X X X X X X X X X X X X X FILE: = /var/log/authpriv (local0) X X X X X X X X X X X X X 8 X X X X X X X X X X X FILE: = /var/log/security (local0) X X 6 X X X X X X X X X X X X X X X X X X X X X X FILE: /var/log/maillog (local0) X X X X X X 6 X X X X X X X X X X X X X X X X X X FILE: = /var/log/lpd-errs (local0) X X X X X X X X X 8 X X X X X X X X X X X X X X X FILE: /var/log/cron (local0) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 X WALL: (local0) X X X X X X X X X X X X X X 6 X X X X X X X X X X FILE: = /var/log/console.log (local0) logmsg: pri 56, flags 4, from compname, msg syslogd: restart syslogd: restarted -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Matthew Seaman Sent: Saturday, May 15, 2004 4:56 AM To: Matt Cyber Dog LaPlante Cc: freebsd-questions@freebsd.org Subject: Re: FreeBSD 4.7 Syslogs On Sat, May 15, 2004 at 01:51:40AM -0400, Matt Cyber Dog LaPlante wrote: > I've inherited a FreeBSD 4.7 server as part of a system administration job. > =A0Recently I noticed that the syslog files had stopped collecting = data. =A0This > includes /var/log/messages and /var/log/console among others. =A0Up = until some > time last week, they'd been full of data, but after some unknown = event, all > data collection stopped. =A0I did not build/configure the system, nor = am I > very fluent in the ways of BSD, so I do not know where else to begin looking > for answers. =A0I ran the newsyslog program to regenerate all the log = files. > =A0It created them, with the single line stating a new log file was = created, > but aside from that one line they remain empty. =A0I tried manually restarting > syslogd, as well as rebooting the whole machine, neither of which have = had > any effect. =A0I have not manually altered any syslog configuration = info, and > I basically have no idea what to try next. =A0I'm a relative noob when = it > comes to FreeBSD, so I'd appreciate answers in a simple format. = Thanks in > advance... Hmmm... that doesn't sound good. Can you use logger(1) to write a test message into the log files? % logger -p daemon.info -t TEST "Some test message" which should appear in /var/log/messages. If it doesn't, look at /etc/syslog.conf and verify that it is sensible. Then try killing syslogd and starting it up in debug mode: # syslogd -d {other syslog flags} this will not daemonize itself or go into the background and will print out various debugging information as log messages come in. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK