Re: empty log files

[Jordan Bettis <jordanb@hafd.org>]

On Fri, Apr 06, 2001 at 02:47:30AM -0400, Andres Salomon wrote:
> i was playing w/ a kernel driver when i noticed the following:
> 
> (machine 1)
> -rw-r-----    1 root     adm             0 Mar 25 06:49 /var/log/kern.log
> -rw-r-----    1 root     adm          2259 Mar 20 17:59 /var/log/kern.log.0
> 
> (machine 2)
> -rw-r-----    1 root     adm             0 Mar 25 06:49 /var/log/kern.log
> -rw-r-----    1 root     adm        436938 Mar 18 18:40 /var/log/kern.log.0

First, check the last log entries, you might have checked it right after
cron rotated it. If they're unusually old, check /var/log/messages to make
sure syslogd has been ether chatting about something else, or writing --MARK--
entries to it.

Also, have you changed your firewall rules lately? You could have turned off
logging on a rule that was generating alot of log output.

-- 
Jordan Bettis <http://www.hafd.org/~jordanb/>
The Unix Philosophy: Do one thing and do it well.
The GNU Philosophy: The Unix Philosophy, for sufficiently large values 
                    of "one".