[root@dhcp-232 ~]# ps afx | grep sys
 1372 ?        Ss     0:00 syslogd -m 0
 1525 ?        Ssl    0:00 dbus-daemon --system
 2073 xvc0     S+     0:00      \_ grep sys
[root@dhcp-232 ~]# lsof -p 1372
COMMAND  PID USER   FD   TYPE             DEVICE    SIZE   NODE NAME
syslogd 1372 root  cwd    DIR              253,0    4096      2 /
syslogd 1372 root  rtd    DIR              253,0    4096      2 /
syslogd 1372 root  txt    REG              253,0   38680 919081 /sbin/syslogd
syslogd 1372 root  mem    REG              253,0  130448 819503 /lib64/ld-2.5.so
syslogd 1372 root  mem    REG              253,0 1678480 819504 /lib64/libc-2.5.so
syslogd 1372 root  mem    REG              253,0   53880 819228 /lib64/libnss_files-2.5.so
syslogd 1372 root    0u  unix 0xffff88001f1dc680           4276 /dev/log
syslogd 1372 root    1w   REG              253,0  141390  36189 /var/log/messages
syslogd 1372 root    2w   REG              253,0    4166  36190 /var/log/secure
syslogd 1372 root    3w   REG              253,0    2470  36191 /var/log/maillog
syslogd 1372 root    4w   REG              253,0    3879  36249 /var/log/cron
syslogd 1372 root    5w   REG              253,0       0  36192 /var/log/spooler
syslogd 1372 root    6w   REG              253,0       0  36250 /var/log/boot.log
[root@dhcp-232 ~]# file /dev/log
/dev/log: socket
[root@dhcp-232 ~]#