13 Nov
2006
13 Nov
'06
10 p.m.
On Mon, 13 Nov 2006 16:20:41 EST, Jeremy Kindy said:
Hello all,
I've set up syslog-ng (1.6.11) on a test server (RHEL4), and am getting some strange timestamps on messages. Here is a sample, as it appears in the log:
Nov 10 14:04:54 host1 sshd[29798]: Accepted password for bob from ::ffff:10.40.131.115 port 32799 ssh2 Nov 10 09:04:54 host1 sshd[29797]: Accepted password for bob from ::ffff:10.40.131.115 port 32799 ssh2 Nov 10 09:04:54 host1 sshd(pam_unix)[29802]: session opened for user bob by (uid=0)
Looks like some of your boxes are running with the system clock set to GMT, and some with local time. Either that, or $TZ isn't being set right. Are these running in a chroot environment that has a busticated or unreadable /etc/localtime?