13b552b92SKay SieversWhat: /dev/kmsg 23b552b92SKay SieversDate: Mai 2012 33b552b92SKay SieversKernelVersion: 3.5 43b552b92SKay SieversContact: Kay Sievers <kay@vrfy.org> 53b552b92SKay SieversDescription: The /dev/kmsg character device node provides userspace access 63b552b92SKay Sievers to the kernel's printk buffer. 73b552b92SKay Sievers 83b552b92SKay Sievers Injecting messages: 93b552b92SKay Sievers Every write() to the opened device node places a log entry in 103b552b92SKay Sievers the kernel's printk buffer. 113b552b92SKay Sievers 123b552b92SKay Sievers The logged line can be prefixed with a <N> syslog prefix, which 133b552b92SKay Sievers carries the syslog priority and facility. The single decimal 143b552b92SKay Sievers prefix number is composed of the 3 lowest bits being the syslog 153b552b92SKay Sievers priority and the higher bits the syslog facility number. 163b552b92SKay Sievers 173b552b92SKay Sievers If no prefix is given, the priority number is the default kernel 183b552b92SKay Sievers log priority and the facility number is set to LOG_USER (1). It 193b552b92SKay Sievers is not possible to inject messages from userspace with the 203b552b92SKay Sievers facility number LOG_KERN (0), to make sure that the origin of 213b552b92SKay Sievers the messages can always be reliably determined. 223b552b92SKay Sievers 233b552b92SKay Sievers Accessing the buffer: 243b552b92SKay Sievers Every read() from the opened device node receives one record 253b552b92SKay Sievers of the kernel's printk buffer. 263b552b92SKay Sievers 273b552b92SKay Sievers The first read() directly following an open() always returns 283b552b92SKay Sievers first message in the buffer; there is no kernel-internal 293b552b92SKay Sievers persistent state; many readers can concurrently open the device 303b552b92SKay Sievers and read from it, without affecting other readers. 313b552b92SKay Sievers 323b552b92SKay Sievers Every read() will receive the next available record. If no more 333b552b92SKay Sievers records are available read() will block, or if O_NONBLOCK is 343b552b92SKay Sievers used -EAGAIN returned. 353b552b92SKay Sievers 363b552b92SKay Sievers Messages in the record ring buffer get overwritten as whole, 373b552b92SKay Sievers there are never partial messages received by read(). 383b552b92SKay Sievers 393b552b92SKay Sievers In case messages get overwritten in the circular buffer while 403b552b92SKay Sievers the device is kept open, the next read() will return -EPIPE, 413b552b92SKay Sievers and the seek position be updated to the next available record. 423b552b92SKay Sievers Subsequent reads() will return available records again. 433b552b92SKay Sievers 443b552b92SKay Sievers Unlike the classic syslog() interface, the 64 bit record 453b552b92SKay Sievers sequence numbers allow to calculate the amount of lost 463b552b92SKay Sievers messages, in case the buffer gets overwritten. And they allow 473b552b92SKay Sievers to reconnect to the buffer and reconstruct the read position 483b552b92SKay Sievers if needed, without limiting the interface to a single reader. 493b552b92SKay Sievers 503b552b92SKay Sievers The device supports seek with the following parameters: 513b552b92SKay Sievers SEEK_SET, 0 523b552b92SKay Sievers seek to the first entry in the buffer 533b552b92SKay Sievers SEEK_END, 0 543b552b92SKay Sievers seek after the last entry in the buffer 553b552b92SKay Sievers SEEK_DATA, 0 563b552b92SKay Sievers seek after the last record available at the time 573b552b92SKay Sievers the last SYSLOG_ACTION_CLEAR was issued. 583b552b92SKay Sievers 593b552b92SKay Sievers The output format consists of a prefix carrying the syslog 603b552b92SKay Sievers prefix including priority and facility, the 64 bit message 613b552b92SKay Sievers sequence number and the monotonic timestamp in microseconds. 623b552b92SKay Sievers The values are separated by a ','. Future extensions might 633b552b92SKay Sievers add more comma separated values before the terminating ';'. 643b552b92SKay Sievers Unknown values should be gracefully ignored. 653b552b92SKay Sievers 663b552b92SKay Sievers The human readable text string starts directly after the ';' 673b552b92SKay Sievers and is terminated by a '\n'. Untrusted values derived from 683b552b92SKay Sievers hardware or other facilities are printed, therefore 693b552b92SKay Sievers all non-printable characters in the log message are escaped 703b552b92SKay Sievers by "\x00" C-style hex encoding. 713b552b92SKay Sievers 723b552b92SKay Sievers A line starting with ' ', is a continuation line, adding 733b552b92SKay Sievers key/value pairs to the log message, which provide the machine 743b552b92SKay Sievers readable context of the message, for reliable processing in 753b552b92SKay Sievers userspace. 763b552b92SKay Sievers 773b552b92SKay Sievers Example: 783b552b92SKay Sievers 7,160,424069;pci_root PNP0A03:00: host bridge window [io 0x0000-0x0cf7] (ignored) 793b552b92SKay Sievers SUBSYSTEM=acpi 803b552b92SKay Sievers DEVICE=+acpi:PNP0A03:00 813b552b92SKay Sievers 6,339,5140900;NET: Registered protocol family 10 823b552b92SKay Sievers 30,340,5690716;udevd[80]: starting version 181 833b552b92SKay Sievers 843b552b92SKay Sievers The DEVICE= key uniquely identifies devices the following way: 853b552b92SKay Sievers b12:8 - block dev_t 863b552b92SKay Sievers c127:3 - char dev_t 873b552b92SKay Sievers n8 - netdev ifindex 883b552b92SKay Sievers +sound:card0 - subsystem:devname 893b552b92SKay Sievers 903b552b92SKay SieversUsers: dmesg(1), userspace kernel log consumers 91