Semua catatan ini disimpan dalam file /var/log/messages. Anda bisa mengetahui proses sistem ini secara langsung dengan memberikan perintah berikut di terminal / konsole:
tail -f /var/log/messages
Berikut contoh proses kerja yang sedang terjadi ketika suatu flash disk dipasang, dipakai, dinonaktifkan (safely remote) dan kemudian dilepas dari komputer.
Apr 10 07:59:44 localhost kernel: usb 5-7: new high speed USB device using ehci_hcd and address 6
Apr 10 07:59:44 localhost kernel: usb 5-7: configuration #1 chosen from 1 choice
Apr 10 07:59:44 localhost kernel: scsi4 : SCSI emulation for USB Mass Storage devices
Apr 10 07:59:49 localhost kernel: scsi 4:0:0:0: Direct-Access USB Flash Disk 1100 PQ: 0 ANSI: 0 CCS
Apr 10 07:59:49 localhost kernel: sd 4:0:0:0: [sda] 1981440 512-byte hardware sectors (1014 MB)
Apr 10 07:59:49 localhost kernel: sd 4:0:0:0: [sda] Write Protect is off
Apr 10 07:59:49 localhost kernel: sd 4:0:0:0: [sda] Assuming drive cache: write through
Apr 10 07:59:49 localhost kernel: sd 4:0:0:0: [sda] 1981440 512-byte hardware sectors (1014 MB)
Apr 10 07:59:49 localhost kernel: sd 4:0:0:0: [sda] Write Protect is off
Apr 10 07:59:49 localhost kernel: sd 4:0:0:0: [sda] Assuming drive cache: write through
Apr 10 07:59:50 localhost kernel: sda: sda1
Apr 10 07:59:50 localhost kernel: sd 4:0:0:0: [sda] Attached SCSI removable disk
Apr 10 07:59:50 localhost kernel: sd 4:0:0:0: Attached scsi generic sg0 type 0
Apr 10 07:59:55 localhost hald: mounted /dev/sda1 on behalf of uid 0
Apr 10 08:00:01 localhost hald: unmounted /dev/sda1 from '/media/disk' on behalf of uid 0
Apr 10 08:00:08 localhost kernel: usb 5-7: USB disconnect, address 6