Remove dot after localhost, works better without dns.
Allow to check the ktrace file of syslogd.
Do not check rotated file when it was not created.
Check SIGHUP and execve.
Check SIGPIPE and SIGTERM in ktrace.
When running without SUDO=sudo the FORW logs appear only 4 times.