Follow-up to 9856e07
, rename '-K' option to '-t'
We need the '-K' option to disable kernel logging, so this option needs to be renamed, unfortunately. Fortunately it's not been released yet. Issue #42 Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
This commit is contained in:
@@ -38,7 +38,7 @@
|
||||
.Nd log systems messages
|
||||
.Sh SYNOPSIS
|
||||
.Nm
|
||||
.Op Fl ?46AdFHKknsTv
|
||||
.Op Fl ?46AdFHknsTtv
|
||||
.Op Fl a Ar addr[/len][:port]
|
||||
.Op Fl a Ar name[:port]
|
||||
.Op Fl b Ar addr[:port]
|
||||
@@ -255,24 +255,6 @@ and wants to monitor when and how it exits.
|
||||
.It Fl H
|
||||
When logging remote messages use hostname from the message (if supplied)
|
||||
instead of using address from which the message was received.
|
||||
.It Fl K
|
||||
Keep (trust) kernel timestamp.
|
||||
.Pp
|
||||
On Linux systems the
|
||||
.Pa /dev/kmsg
|
||||
timestamp is a monotonic clock, in microseconds, relative to the boot of
|
||||
the system. This timestamp is, among other things,
|
||||
.Sy not
|
||||
adjusted for suspend/resume cycles, meaning the kernel logs can start to
|
||||
go out of sync with the rest of the system. This in turn can make it
|
||||
really hard to correlate events.
|
||||
.Pp
|
||||
.Nm
|
||||
by default only trusts the kernel timestamp when starting up the first
|
||||
time. As soon as the the kernel ring buffer has been emptied,
|
||||
.Nm
|
||||
uses its own current time for each received kernel log message. This
|
||||
option disables that behavior.
|
||||
.It Fl k
|
||||
Disable the translation of
|
||||
messages received with facility
|
||||
@@ -336,6 +318,24 @@ Always use the local time and date for messages received from the network,
|
||||
instead of the timestamp field supplied in the message by the remote host.
|
||||
This is useful if some of the originating hosts cannot keep time properly
|
||||
or are unable to generate a correct timestamp.
|
||||
.It Fl t
|
||||
Keep (trust) kernel timestamp.
|
||||
.Pp
|
||||
On Linux systems the
|
||||
.Pa /dev/kmsg
|
||||
timestamp is a monotonic clock, in microseconds, relative to the boot of
|
||||
the system. This timestamp is, among other things,
|
||||
.Sy not
|
||||
adjusted for suspend/resume cycles, meaning the kernel logs can start to
|
||||
go out of sync with the rest of the system. This in turn can make it
|
||||
really hard to correlate events.
|
||||
.Pp
|
||||
.Nm
|
||||
by default only trusts the kernel timestamp when starting up the first
|
||||
time. As soon as the the kernel ring buffer has been emptied,
|
||||
.Nm
|
||||
uses its own current time for each received kernel log message. This
|
||||
option disables that behavior.
|
||||
.It Fl v
|
||||
Show program version and exit.
|
||||
.El
|
||||
|
Reference in New Issue
Block a user