[123031] in North American Network Operators' Group
Re: Future timestamps in /var/log/secure
daemon@ATHENA.MIT.EDU (William Pitcock)
Fri Feb 26 14:17:45 2010
From: William Pitcock <nenolod@systeminplace.net>
To: Brielle Bruns <bruns@2mbit.com>
In-Reply-To: <4B8812EE.2020003@2mbit.com>
Date: Fri, 26 Feb 2010 13:17:20 -0600
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote:
> Isn't the timestamps inserted by syslog rather then the reporting
> program itself?
The syslog message sent to the local unix socket (/dev/log
or /dev/syslog) may contain a timestamp, in which case, that timestamp
may be used instead of the local time. As the syslog protocol defines
that timestamps are localtime, without any specification of what
timezone localtime actually is, the TZ environment variable of the
application calling syslog() will affect the timestamp placed in the
log.
William
