dmesg for kernel messages in Linux CLI - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the dmesg command do in Linux?

The dmesg command shows kernel messages, which are system-level logs about hardware and drivers during boot and runtime.

beginner

How can you view the latest kernel messages using dmesg?

Simply run dmesg in the terminal to see all kernel messages, with the newest messages usually at the bottom.

intermediate

How do you filter dmesg output to show only messages related to USB devices?

You can use dmesg | grep -i usb to show only kernel messages that mention USB devices.

intermediate

What is the purpose of the -T option in dmesg?

The -T option shows human-readable timestamps instead of raw kernel time, making it easier to understand when events happened.

beginner

Why might you need to run dmesg with sudo?

Some systems restrict access to kernel logs, so running sudo dmesg gives you permission to see all messages.

What kind of messages does dmesg display?

A Kernel and hardware messages

B User application logs

C Web server access logs

D Database query logs

dmesg shows kernel and hardware-related messages, not user or application logs.

Which command filters dmesg output to show only USB-related messages?

A dmesg usb

B grep dmesg usb

C dmesg | grep usb

D usb | dmesg

Using grep after dmesg filters the output for 'usb'.

What does the -T option do in dmesg?

A Turns off output

B Truncates output

C Tests kernel messages

D Shows timestamps in human-readable format

The -T option converts kernel timestamps to readable date and time.

Why might dmesg require sudo to run fully?

A Kernel logs may be restricted to root for security

B It needs internet access

C It modifies system files

D It only runs as a background service

Access to kernel logs is often limited to root users for security reasons.

Where are dmesg messages usually stored?

A /etc/dmesg.conf

B /var/log/dmesg or kernel ring buffer

C /home/user/logs

D /usr/bin/dmesg

dmesg reads from the kernel ring buffer and logs may be saved in /var/log/dmesg.

Explain what the dmesg command is used for and how it helps in troubleshooting.

Think about what happens when your computer starts and how you check hardware problems.

Describe how you would find USB device messages using dmesg and why filtering output is useful.

Imagine looking for a needle in a haystack of logs.

Practice

1. What is the primary purpose of the dmesg command in Linux?

easy

A. To display kernel messages and system events

B. To list all running processes

C. To show disk usage statistics

D. To edit system configuration files

Solution

1. Step 1: Understand the role of dmesg

   The dmesg command reads the kernel ring buffer, which contains messages about system events and hardware status.

2. Step 2: Compare with other options

   Options A, B, and C relate to file editing, process listing, and disk usage, which are unrelated to kernel messages.

3. Final Answer:

   To display kernel messages and system events -> Option A

4. Quick Check:

   Kernel messages = display with dmesg [OK]

Hint: dmesg always shows kernel logs, not processes or files [OK]

Common Mistakes:

• Confusing dmesg with ps or top commands
• Thinking dmesg edits files
• Assuming dmesg shows disk info

2. Which of the following is the correct syntax to display kernel messages with human-readable timestamps using dmesg?

easy

A. dmesg -r

B. dmesg --time

C. dmesg -T

D. dmesg -h

Solution

1. Step 1: Identify the option for readable timestamps

   The -T option in dmesg converts kernel timestamps to human-readable format.

2. Step 2: Verify other options

   -r reverses output order, --time is invalid, and -h shows help.

3. Final Answer:

   dmesg -T -> Option C

4. Quick Check:

   Readable time = -T option [OK]

Hint: Use -T for readable timestamps in dmesg output [OK]

Common Mistakes:

• Using -r instead of -T for timestamps
• Typing invalid options like --time
• Confusing -h (help) with timestamp option

3. What will be the output of the command dmesg | grep usb?

medium

A. All kernel messages containing the word 'usb'

B. Only USB device names without any messages

C. A list of all running USB processes

D. An error because grep cannot be used with dmesg

Solution

1. Step 1: Understand the pipe and grep usage

   The command pipes dmesg output to grep usb, filtering lines containing 'usb'.

2. Step 2: Interpret the filtered output

   This shows kernel messages related to USB devices or events, not just names or processes.

3. Final Answer:

   All kernel messages containing the word 'usb' -> Option A

4. Quick Check:

   dmesg | grep filters messages by keyword [OK]

Hint: Pipe dmesg to grep to filter messages by keyword [OK]

Common Mistakes:

• Thinking grep lists processes
• Expecting only device names without messages
• Assuming grep causes errors with dmesg

4. You run dmesg -T but get an error saying "dmesg: option requires an argument -- 'T'". What is the likely cause?

medium

A. You typed the command incorrectly; -T needs a filename

B. You used an older dmesg version that does not support -T

C. The kernel is not loaded, so dmesg fails

D. You need root permissions to use -T option

Solution

1. Step 1: Analyze the error message

   The error says the option -T requires an argument, which is unusual because -T normally needs none.

2. Step 2: Understand version compatibility

   Older versions of dmesg do not support -T, causing this error.

3. Final Answer:

   You used an older dmesg version that does not support -T -> Option B

4. Quick Check:

   Old dmesg versions lack -T support [OK]

Hint: Check dmesg version if -T option errors [OK]

Common Mistakes:

• Assuming -T needs a filename argument
• Thinking root permission is required for -T
• Blaming kernel load status for this error

5. You want to monitor new kernel messages related to network devices in real-time. Which command combination is best?

hard

A. dmesg --follow --filter=net

B. dmesg -T | grep net

C. dmesg | tail -n 10 | grep net

D. dmesg -w | grep net

Solution

1. Step 1: Identify real-time monitoring option

   The -w option makes dmesg wait and show new messages as they appear.

2. Step 2: Combine with grep for filtering

   Piping to grep net filters messages related to network devices.

3. Step 3: Evaluate other options

   -T shows timestamps but is not real-time; tail -n 10 shows only last 10 lines; --follow --filter=net is invalid syntax.

4. Final Answer:

   dmesg -w | grep net -> Option D

5. Quick Check:

   Real-time dmesg = -w with grep filter [OK]

Hint: Use dmesg -w for live kernel logs, pipe to grep to filter [OK]

Common Mistakes:

• Using -T for real-time (it only formats time)
• Using tail only shows past logs, not live
• Assuming --follow or --filter options exist