Re: Future timestamps in /var/log/secure

[gordon b slater <gordslater () ieee org>]

On Fri, 2010-02-26 at 13:17 -0600, William Pitcock wrote:
> On Fri, 2010-02-26 at 11:29 -0700, Brielle Bruns wrote:
> > Isn't the timestamps inserted by syslog rather then the reporting 
> > program itself?
>
> The syslog message sent to the local unix socket (/dev/log
> or /dev/syslog) may contain a timestamp, in which case, that timestamp
> may be used instead of the local time.  As the syslog protocol defines
> that timestamps are localtime, without any specification of what
> timezone localtime actually is, the TZ environment variable of the
> application calling syslog() will affect the timestamp placed in the
> log.

aha! there you go, mine doesn't but maybe yours does?

Gord
--
tic toc