[123035] in North American Network Operators' Group
Re: Future timestamps in /var/log/secure
daemon@ATHENA.MIT.EDU (gordon b slater)
Fri Feb 26 14:33:52 2010
X-IP-MAIL-FROM: gordslater@ieee.org
From: gordon b slater <gordslater@ieee.org>
To: William Pitcock <nenolod@systeminplace.net>
In-Reply-To: <1267211840.4093.4.camel@petrie>
Date: Fri, 26 Feb 2010 19:30:36 +0000
Cc: nanog@nanog.org
Reply-To: gordslater@ieee.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Fri, 2010-02-26 at 13:17 -0600, William Pitcock wrote:
> On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote:
> > Isn't the timestamps inserted by syslog rather then the reporting
> > program itself?
>
> The syslog message sent to the local unix socket (/dev/log
> or /dev/syslog) may contain a timestamp, in which case, that timestamp
> may be used instead of the local time. As the syslog protocol defines
> that timestamps are localtime, without any specification of what
> timezone localtime actually is, the TZ environment variable of the
> application calling syslog() will affect the timestamp placed in the
> log.
aha! there you go, mine doesn't but maybe yours does?
Gord
--
tic toc
