Hello all, I've set up syslog-ng (1.6.11) on a test server (RHEL4), and am getting some strange timestamps on messages. Here is a sample, as it appears in the log: Nov 10 14:04:54 host1 sshd[29798]: Accepted password for bob from ::ffff:10.40.131.115 port 32799 ssh2 Nov 10 09:04:54 host1 sshd[29797]: Accepted password for bob from ::ffff:10.40.131.115 port 32799 ssh2 Nov 10 09:04:54 host1 sshd(pam_unix)[29802]: session opened for user bob by (uid=0) Nov 10 22:00:54 host1 sshd[28326]: Accepted password for bob from ::ffff:10.40.131.115 port 33569 ssh2 Nov 10 17:00:54 host1 sshd[28325]: Accepted password for bob from ::ffff:10.40.131.115 port 33569 ssh2 Nov 10 17:00:54 host1 sshd(pam_unix)[28330]: session opened for user bob by (uid=0) Any suggestions? My guess is that it's a local time vs GMT or something like that (we're in Eastern Time Zone of USA, which is GMT -5). All of our servers are currently in the same time zone, and all of the ones currently logging to syslog-ng are RHEL4, though we do have a few RHEL3 and RHAS2.1 hanging around. Thank you, Jeremy -- : Jeremy Kindy : System Administrator - Unix Infrastructure : Wake Forest University : : email - kindyjd@wfu.edu : work - 336-758-3076 : cell - 336-782-8500 --