Re: Odd timestampts in /var/log/messages from sshd

The really odd thing, from what I can tell is this is related to sshd 
only.  Everything else appears to be logged chronologically.  Also, if I 
use logger to output statements to /var/log/messages there is no time 
problems.  The only time I see this behavior is against the sshd log 
statements.

Jeremy C. Reed wrote:
> > Oct 23 08:57:26 adminserver sshd[19422]: Failed password for invalid user ...
> > ssh2
> > Oct 23 *04:57:30* adminserver sshd[19423]: Failed password for invalid user
> > ... ssh2
> > Oct 23 08:57:30 adminserver sshd[19424]: Failed password for invalid user ...
> > ssh2
> > Oct 23 *04:57:34* adminserver sshd[19425]: Failed password for invalid user
> > ... ssh2
> > Oct 23 08:57:34 adminserver sshd[19426]: Failed password for invalid user ...
> > ssh2
> >     
>
> >From looking at the openssh source for this (auth.c and log.c) I don't see 
> any timestamp added to the message.
>
> When syslogd receives a message without timestamp it adds its own.
>
> I don't know why your syslogd is logging with different times, but I'm 
> guessing that something is causing the timezone to change.
>
>   

--
Scot P. Floess
27 Lake Royale
Louisburg, NC  27549

252-478-8087 (Home)
919-754-4592 (Work)

Chief Architect JPlate  http://sourceforge.net/projects/jplate
Chief Architect JavaPIM http://sourceforge.net/projects/javapim