Future timestamps in /var/log/secure

William Pitcock nenolod at systeminplace.net
Fri Feb 26 13:17:20 CST 2010


On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote:
> Isn't the timestamps inserted by syslog rather then the reporting 
> program itself?

The syslog message sent to the local unix socket (/dev/log
or /dev/syslog) may contain a timestamp, in which case, that timestamp
may be used instead of the local time.  As the syslog protocol defines
that timestamps are localtime, without any specification of what
timezone localtime actually is, the TZ environment variable of the
application calling syslog() will affect the timestamp placed in the
log.

William





More information about the NANOG mailing list