/var includes data to be changed while the system is running. This includes each system that is specific, that is, a directory that cannot be shared with other computers, such as/var/log,/var/lock,/var/run. Some directories can still be shared with other systems, such as/var/mail,/var/cache/man,/var/cache/fonts,/var/spool/news. The purpose of the Var directory is to extract files or temporary files and directories that need to be changed during the running of the USR directory, thereby enabling the USR directory to be mounted as read-only. Implicitly requires that the Var directory be mounted in a way that can be read or written.
Note the following requirements for the analysis of the directory
1 The purpose and function of the existence of each catalogue.
2 What information can be obtained through the information in the directory, and how to access the information.
3 is safe for file operations in the directory.
The/var/log/messages file is stored in the system log information, when the kernel program debugging, PRINTK statements produced by the information can not be displayed, the use of Cat/var/log/messages file method to view the printed information.
PS. To view the last few lines of a file, use the Tai command, Tail/var/log/messages