osx: capture some syslogd-related bits