From owner-freebsd-questions@FreeBSD.ORG  Tue May  9 12:07:51 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3178116A444
	for <freebsd-questions@freebsd.org>;
	Tue,  9 May 2006 12:07:51 +0000 (UTC)
	(envelope-from nospam@mgedv.net)
Received: from mgedv.at (mail.mgedv.at [195.3.87.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3783443D77
	for <freebsd-questions@freebsd.org>;
	Tue,  9 May 2006 12:07:49 +0000 (GMT)
	(envelope-from nospam@mgedv.net)
Received: from metis (localhost [127.0.0.1])
	by mgedv.at (SMTPServer) with ESMTP
	id 99EBC186864; Tue,  9 May 2006 14:07:32 +0200 (MEST)
From: "No@SPAM@mgEDV.net" <nospam@mgedv.net>
To: <freebsd-questions@freebsd.org>
Date: Tue, 9 May 2006 14:07:46 +0200
Message-ID: <000901c67361$2f5af570$01010101@avalon.lan>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
In-Reply-To: <loom.20060509T135438-520@post.gmane.org>
Thread-Index: AcZzX7fWz78ftY0qTFuxlNRkAwmjWAAAMkhQ
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Cc: 'Matt Bostock' <matt@mattbostock.com>
Subject: RE: Logs not being saved (/var/log/messages, etc)?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: nospam@mgedv.net
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 09 May 2006 12:07:51 -0000


> The usual system logs such as /var/log/messages are not being saved.
> /var/log/messages does not exist, but /var/log/messages.0 
> (the old rotated
> version) does.
if theres a rotated log, there should be a source for, too.
check permissions on /var/log (eg. schg-flag) maybe there's
some odd reason for syslogd not being able to write to it.
also, try creating an empty file (touch /var/log/messages;
chmod o-r /var/log/messages) and restarting syslogd.
you can test logging with the logger-command.

if your box is not private (for you only):
did you check, if someone removed the file? check for logins,
network sessions, strange users with uid 0 in master.passwd,
change-date of files in at least /etc. if anything looks strange,
change your root-pw, shutdown unnecessary daemons, and take the
box off the net if it's possible ,-)