right, if you used syslog and then an asl.conf you could take advantage of how it rolls things, but that doesn't sound like what you're expecting