Re: timestamps and timezones (was: time-sync)

[by way of "Chris M. Lonvick" <[EMAIL PROTECTED]>]

 >>>>> "Roger" == Roger Marquis <[EMAIL PROTECTED]> writes:

Roger> Again, from the perspective of an administrator, 5 bytes of timezone
Roger> info cab be a great help in a number of ways.  For reports it is much
Roger> easier than determining the source timezone by looking at the source
Roger> hostname (required with existing syslog format).  It's also much easier
Roger> than doing the same and then factoring the difference bttn UTC.  The
Roger> main benefit would be that an originating timezone stamp would make the
Roger> logs substantially more human readable (a'la sendmail logs).

_My_ requirement is that the timestamp is logged in UTC, so that event
correlation doesn't require nasty timezone math.

If there is _also_ a timezone offset, great, but _please_ do not log
timestamps in local time.

-- 
Carson Gaspar -- [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
http://www.cs.columbia.edu/~carson/home.html
Queen Trapped in a Butch Body