Future timestamps in /var/log/secure
gordon b slater
gordslater at ieee.org
Fri Feb 26 13:30:36 CST 2010
On Fri, 2010-02-26 at 13:17 -0600, William Pitcock wrote:
> On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote:
> > Isn't the timestamps inserted by syslog rather then the reporting
> > program itself?
> The syslog message sent to the local unix socket (/dev/log
> or /dev/syslog) may contain a timestamp, in which case, that timestamp
> may be used instead of the local time. As the syslog protocol defines
> that timestamps are localtime, without any specification of what
> timezone localtime actually is, the TZ environment variable of the
> application calling syslog() will affect the timestamp placed in the
aha! there you go, mine doesn't but maybe yours does?
More information about the NANOG