Oh, never mind my previous reply. It seems that we are doing this on purpose:
/* Solaris doesn't have the "%z", so we set the timezone to 0. */
#ifdef SOLARIS
strftime(snd_msg, 127, "Date: %a, %d %b %Y %T -0000\r\n",p);
#else
strftime(snd_msg, 127, "Date: %a, %d %b %Y %T %z\r\n",p);
#endif
I will look into fixing that.
Thanks,
--
Daniel B. Cid
dcid ( at ) ossec.net
On Thu, Sep 18, 2008 at 9:02 AM, Daniel Cid <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Is this happening on Solaris? I got a few reports about it already,
> but I can't reproduce anywhere
> else.
>
> Thanks,
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>
> On Wed, Aug 27, 2008 at 6:16 PM, kidplug <[EMAIL PROTECTED]> wrote:
>>
>> I saw this discussed in a thread from last fall, but I am on v 1.5.1
>> and the email alerts from OSSEC look like this:
>>
>> Date: Wed, 27 Aug 2008 09:12:08 -0000
>>
>> Note the offset of -0000.
>> So my mail client (outlook) is interpreting that as UTC and showing it
>> to me as 05:12 ET ( I am in ET ).
>>
>>
>> Thanks,
>> Mitch
>>
>>
>