à moi (comme liho /var/log/message
s avec un "s") :
[root@localhost ~]# file /var/log/messages
/var/log/messages: data
[root@localhost ~]# file -k /var/log/messages
/var/log/messages: data
[root@localhost ~]# head -n2 /var/log/messages | hexdump -C
00000000 4a 61 6e 20 31 38 20 31 36 3a 33 32 3a 32 34 20 |Jan 18 16:32:24 |
00000010 6c 6f 63 61 6c 68 6f 73 74 20 6b 65 72 6e 65 6c |localhost kernel|
00000020 3a 20 69 6d 6b 6c 6f 67 20 33 2e 32 31 2e 39 2c |: imklog 3.21.9,|
00000030 20 6c 6f 67 20 73 6f 75 72 63 65 20 3d 20 2f 70 | log source = /p|
00000040 72 6f 63 2f 6b 6d 73 67 20 73 74 61 72 74 65 64 |roc/kmsg started|
00000050 2e 0a 4a 61 6e 20 31 38 20 31 36 3a 33 32 3a 32 |..Jan 18 16:32:2|
00000060 34 20 6c 6f 63 61 6c 68 6f 73 74 20 72 73 79 73 |4 localhost rsys|
00000070 6c 6f 67 64 3a 20 5b 6f 72 69 67 69 6e 20 73 6f |logd: [origin so|
00000080 66 74 77 61 72 65 3d 22 72 73 79 73 6c 6f 67 64 |ftware="rsyslogd|
00000090 22 20 73 77 56 65 72 73 69 6f 6e 3d 22 33 2e 32 |" swVersion="3.2|
000000a0 31 2e 39 22 20 78 2d 70 69 64 3d 22 32 30 33 35 |1.9" x-pid="2035|
000000b0 22 20 78 2d 69 6e 66 6f 3d 22 68 74 74 70 3a 2f |" x-info="http:/|
000000c0 2f 77 77 77 2e 72 73 79 73 6c 6f 67 2e 63 6f 6d |/www.rsyslog.com|
000000d0 22 5d 20 72 65 73 74 61 72 74 0a |"] restart.|
000000db
Et ma clé USB montée et démontée :
[root@localhost ~]# less /var/log/messages | grep hald
Jan 19 09:34:31 localhost hald: mounted /dev/sdc on behalf of uid 500
Jan 19 11:23:26 localhost hald: unmounted /dev/sdc from '/media/STORE'N'GO' on behalf of uid 500
Jan 19 11:27:32 localhost hald: mounted /dev/sdc on behalf of uid 500
Jan 19 11:28:52 localhost hald: unmounted /dev/sdc from '/media/STORE'N'GO' on behalf of uid 500
Jan 19 12:24:04 localhost hald: mounted /dev/sdc on behalf of uid 500
Jan 19 12:29:11 localhost hald: unmounted /dev/sdc from '/media/STORE'N'GO' on behalf of uid 500
Jan 19 12:31:47 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 19 12:32:04 localhost hald: unmounted /dev/sdc1 from '/media/F10_USB' on behalf of uid 500
Jan 19 12:32:44 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 19 12:32:49 localhost hald: unmounted /dev/sdc1 from '/media/F10_USB' on behalf of uid 500
Jan 19 12:32:57 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 19 12:33:01 localhost hald: unmounted /dev/sdc1 from '/media/F10_USB' on behalf of uid 500
Jan 20 00:34:02 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 20 00:42:00 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 20 00:47:01 localhost hald: unmounted /dev/sdc1 from '/media/disk' on behalf of uid 500
Jan 20 00:47:20 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 20 00:47:23 localhost hald: unmounted /dev/sdc1 from '/media/disk' on behalf of uid 500
Jan 20 19:03:19 localhost hald: mounted /dev/sdc1 on behalf of uid 500
Jan 20 19:33:08 localhost hald: unmounted /dev/sdc1 from '/media/F10_USB' on behalf of uid 500