<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:Courier New,courier,monaco,monospace,sans-serif;font-size:12pt"><div>Marcelo,<br><br>I didn't see open file for /var/log/messages.<br><br>Here is the screen output:<br>========================================================================<br>[root@sun ~]# lsof /var/log/*<br>COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME<br>syslogd 2001 root 1w REG 8,6 25323 17653325 /var/log/secure<br>syslogd 2001 root 2w REG 8,6 117544 17653330 /var/log/maillog<br>syslogd 2001 root 3w REG 8,6 13674 17653414 /var/log/cron<br>syslogd 2001 root 4w REG
8,6 0 17653337 /var/log/spooler<br>syslogd 2001 root 5w REG 8,6 0 17653412 /var/log/boot.log<br>syslogd 2001 root 9w REG 8,6 166980 17653308 /var/log/syslog<br>acpid 2418 root 1w REG 8,6 10758 17653423 /var/log/acpid<br>acpid 2418 root 2w REG 8,6 10758 17653423 /var/log/acpid<br>python 3040 root 3w REG 8,6 1187439 17653317 /var/log/denyhosts<br>python 3040 root 5r REG 8,6 25323 17653325 /var/log/secure<br>[root@sun ~]# ps aux | grep syslog<br>root 2001 0.0 0.0
1720 604 ? Ss Feb12 0:00 syslogd -m 0 -r<br> -x<br>root 8249 0.0 0.0 3908 660 pts/0 R+ 07:04 0:00 grep syslog<br>=================================================================================<br><br></div><div style="font-family: Courier New,courier,monaco,monospace,sans-serif; font-size: 12pt;">Frank<br><div style="font-family: arial,helvetica,sans-serif; font-size: 13px;"><font face="Tahoma" size="2"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Marcelo Roccasalva <marcelo-centos@irrigacion.gov.ar><br><b><span style="font-weight: bold;">To:</span></b> CentOS mailing list <centos@centos.org><br><b><span style="font-weight: bold;">Sent:</span></b> Friday, February 13, 2009 5:35:51 AM<br><b><span style="font-weight:
bold;">Subject:</span></b> Re: [CentOS] logs such as messages, boot.log, and kernel contained 0 size<br></font><br>
On Thu, Feb 12, 2009 at 11:02 PM, Frank Ling <<a ymailto="mailto:frankling77@yahoo.com" href="mailto:frankling77@yahoo.com">frankling77@yahoo.com</a>> wrote:<br>> Hi Marcelo,<br>><br>> Thanks for the comment. I had SELinux disabled. Anyway I tried your trick,<br>> and it didn't work. Something must went wrong.<br><br>Are the files opened?:<br><br># lsof /var/log/*<br><br>Can you "strace" the [syslog] pid?<br><br>-- <br>Marcelo<br><br>"¿No será acaso que ésta vida moderna está teniendo más de moderna que<br>de vida?" (Mafalda)<br>_______________________________________________<br>CentOS mailing list<br><a ymailto="mailto:CentOS@centos.org" href="mailto:CentOS@centos.org">CentOS@centos.org</a><br><span><a target="_blank" href="http://lists.centos.org/mailman/listinfo/centos">http://lists.centos.org/mailman/listinfo/centos</a></span><br></div></div></div><br>
</body></html>