Re: Deleted auth.log OT? question

2005-12-05 Thread Paul E Condon
On Fri, Dec 02, 2005 at 06:34:04PM -0500, Roberto C. Sanchez wrote: > On Fri, Dec 02, 2005 at 06:30:46PM -0500, Amish Rughoonundon wrote: > > Hi, > > I delete auth.log file by mistake and although I created it again,programs > > don't write anything to it anymore. Any suggestions. Thanks a bunch >

Re: Deleted auth.log

2005-12-02 Thread Marcello Di Marino Azevedo
You still can use lsof, even for deleted files. There is always more than a way to do it... Em Sáb, 2005-12-03 às 10:19 +1100, Arafangion escreveu: > On Sat, 3 Dec 2005 10:58 am, Marcello Di Marino Azevedo wrote: > > fuser - identify processes using files or sockets. > > > > debian:/var/log# fuse

Re: Deleted auth.log

2005-12-02 Thread Arafangion
On Sat, 3 Dec 2005 10:55 am, Frank Gevaerts wrote: > On Sat, Dec 03, 2005 at 09:50:28AM +1100, Arafangion wrote: > > This leads to an interesting question - are there any tools that can > > reveal "lost" files - those who no-longer have an entry in the fs, but > > are still open? > > lsof can do th

Re: Deleted auth.log

2005-12-02 Thread Arafangion
On Sat, 3 Dec 2005 10:58 am, Marcello Di Marino Azevedo wrote: > fuser - identify processes using files or sockets. > > debian:/var/log# fuser syslog > syslog: 3407 > debian:/var/log# fuser -u syslog > syslog: 3407(root) Yes, it identifies processes _using_ files or soc

Re: Deleted auth.log

2005-12-02 Thread Frank Gevaerts
On Sat, Dec 03, 2005 at 09:50:28AM +1100, Arafangion wrote: > This leads to an interesting question - are there any tools that can reveal > "lost" files - those who no-longer have an entry in the fs, but are still > open? lsof can do that Frank -- "Debugging is twice as hard as writing the c

Re: Deleted auth.log

2005-12-02 Thread Marcello Di Marino Azevedo
fuser - identify processes using files or sockets. debian:/var/log# fuser syslog syslog: 3407 debian:/var/log# fuser -u syslog syslog: 3407(root) Em Sáb, 2005-12-03 às 09:50 +1100, Arafangion escreveu: > On Sat, 3 Dec 2005 10:42 am, René Seindal wrote: > > Roberto C. S

Re: Deleted auth.log

2005-12-02 Thread Amish Rughoonundon
Roberto C. Sanchez wrote (03-12-2005 00:34): On Fri, Dec 02, 2005 at 06:30:46PM -0500, Amish Rughoonundon wrote: Hi, I delete auth.log file by mistake and although I created it again,programs don't write anything to it anymore. Any suggestions. Thanks a bunch Amish That is because, althou

Re: Deleted auth.log

2005-12-02 Thread Arafangion
On Sat, 3 Dec 2005 10:42 am, René Seindal wrote: > Roberto C. Sanchez wrote (03-12-2005 00:34): > > That is because, although auth.log is gone, any file descriptors that > > were open to it are still available. Thus, until all the file > > descriptors have also been released, the file still "exis

Re: Deleted auth.log

2005-12-02 Thread René Seindal
Roberto C. Sanchez wrote (03-12-2005 00:34): On Fri, Dec 02, 2005 at 06:30:46PM -0500, Amish Rughoonundon wrote: Hi, I delete auth.log file by mistake and although I created it again,programs don't write anything to it anymore. Any suggestions. Thanks a bunch Amish That is because, althou

Re: Deleted auth.log

2005-12-02 Thread Roberto C. Sanchez
On Fri, Dec 02, 2005 at 06:30:46PM -0500, Amish Rughoonundon wrote: > Hi, > I delete auth.log file by mistake and although I created it again,programs > don't write anything to it anymore. Any suggestions. Thanks a bunch > Amish > That is because, although auth.log is gone, any file descriptors