The really odd thing, from what I can tell is this is related to sshd
only. Everything else appears to be logged chronologically. Also, if I
use logger to output statements to /var/log/messages there is no time
problems. The only time I see this behavior is against the sshd log
statements.
Jeremy C. Reed wrote:
Oct 23 08:57:26 adminserver sshd[19422]: Failed password for invalid user ...
ssh2
Oct 23 *04:57:30* adminserver sshd[19423]: Failed password for invalid user
... ssh2
Oct 23 08:57:30 adminserver sshd[19424]: Failed password for invalid user ...
ssh2
Oct 23 *04:57:34* adminserver sshd[19425]: Failed password for invalid user
... ssh2
Oct 23 08:57:34 adminserver sshd[19426]: Failed password for invalid user ...
ssh2
>From looking at the openssh source for this (auth.c and log.c) I don't see
any timestamp added to the message.
When syslogd receives a message without timestamp it adds its own.
I don't know why your syslogd is logging with different times, but I'm
guessing that something is causing the timezone to change.
--
Scot P. Floess
27 Lake Royale
Louisburg, NC 27549
252-478-8087 (Home)
919-754-4592 (Work)
Chief Architect JPlate http://sourceforge.net/projects/jplate
Chief Architect JavaPIM http://sourceforge.net/projects/javapim
