On Thu, 4 Mar 1999, I SEE wrote:

> I used to see messages about ftp access in /var/log/messages but since I
> zero length the file and did a "tail -f /var/log/messages" I don't get any
> anymore.

I don't have the detailed explanation handy, but you broke the system's
link with the file.  From that point on, syslogd can't write to it (you
actually create a new file as far as the system is concerned; I believe 
the old file is still being updated, but you can't see it anymore). You
can SIGHUP syslogd to reconnect to the output log file (see the syslogd
man page under SIGNALS). 

> 
> The file is still writable by root and now I have empty files called
> messages.1 and messages.2.
> 
> In inet.d its still in.ftpd -l -a
> 
> Also, what the quickest way to zero length a file!?

I usually just 'echo -n < /dev/null > filename'.  This overwrites without
breaking the syslogd connection.

Geof

DISCLAIMER:  The comments above are my own and may not represent the views
             of my employer.
+-------------------------------+-------------------------------------------+
:         Geof Goodrum          :         US Department of Commerce         :
:       +1-301-457-5100         : NOAA/NESDIS National Climatic Data Center :
:  [EMAIL PROTECTED]  :         Satellite Services Branch         :
+-------------------------------+-------------------------------------------+

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to