Future timestamps in /var/log/secure

Fri Feb 26 18:55:27 UTC 2010

the proftpd line happened to be the next line in the log.  the
next simular ssh lines looks like (duplicate removed)

Feb 26 10:08:48 mx sshd[22165]: Did not receive identification string from UNKNOWN
Feb 26 10:09:27 mx sshd[22261]: Failed password for root from 219.137.192.231 port 54111 ssh2

>
> Been a long time since I've dealt with this stuff, but it looks like the
> shell for proftpd has a different TZ from the one running the other
> stuff.  (syslogd runs in the shell of the caller, right?)
>