Path: csiph.com!feeder.erje.net!1.eu.feeder.erje.net!news.unit0.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Jolly Roger Newsgroups: comp.sys.mac.system Subject: Re: Major Crashing! Date: 12 Oct 2016 17:19:14 GMT Organization: People for the Ethical Treatment of Pirates Lines: 47 Message-ID: References: <2016100914440485222-xxx@yyyzzz> <2016100916560594420-xxx@yyyzzz> <2016101017422133874-xxx@yyyzzz> <2016101022221792062-xxx@yyyzzz> <2016101107573659384-xxx@yyyzzz> <2016101109410119907-xxx@yyyzzz> <2016101111142593545-xxx@yyyzzz> X-Trace: individual.net fg8297B6in5XVC2J9AvBkAYAyLTpn1e/nlvG+yyFtgxLSPIvl7 Cancel-Lock: sha1:Q0AAfOlXgknClrJD8gLzx8KdZwU= Mail-Copies-To: nobody User-Agent: slrn/1.0.1 (Darwin) Xref: csiph.com comp.sys.mac.system:95554 On 2016-10-12, Happy.Hobo wrote: > On 10-12-2016 00:50, Jolly Roger wrote: >> Happy.Hobo wrote: >>> On 10-11-2016 17:49, Jolly Roger wrote: >>>> Happy.Hobo wrote: >>>>> On 10-11-2016 13:18, Jolly Roger wrote: >>>>>> You tell me whether we can move on. The question of which logs were >>>>>> created around the time of the event still stands. >>>>> >>>>> Aren't most logs added to frequently when computer is running, and >>>>> especially during boot? >>>> >>>> The hang happens while the computer is running. >>> >>> But if it's hung, the only way to look at logs is kill power and reboot, >>> thus writing to at least some of the logs. system.log gets hundreds of >>> lines during boot. >> >> So? Logs are time stamped. And the time of the hang is known. What's your >> point? > > Didn't you tell OP to look in Finder for logs modified at the time of > the hang? "created around the time of the event"? Absolutely. And nothing is stopping him from doing just that. > (After he complained that the lines in some of the logs were not > time-stamped) In each of those cases, the log file itself has a creation date. So that's not a problem. > My point is that they could be modified later, i.e., during the reboot > and thus Finder wouldn't help. That's incorrect because the Finder search I told him to do looks at the *creation* date of the log file, and macOS doesn't modify hang/crash logs once they are created. Also, every message in the system log is time stamped. It seems you are trying to manufacture a problem where none exists. -- E-mail sent to this address may be devoured by my ravenous SPAM filter. I often ignore posts from Google. Use a real news client instead. JR