Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Odd timestampts in /var/log/messages from sshd |
|---|---|
| Date: | Thu, 26 Oct 2006 14:26:01 -0400 |
Pretty much all my permissions come up with: user has rw group has r world has r
On Tue, 24 Oct 2006 15:59:16 -0500 (CDT) "Jeremy C. Reed" <reed@reedmedia.net> wrote:
Oct 23 08:57:26 adminserver sshd[19422]: Failed password forFrom looking at the openssh source for this (auth.c and log.c) I
invalid user ... ssh2
Oct 23 *04:57:30* adminserver sshd[19423]: Failed password for
invalid user ... ssh2
Oct 23 08:57:30 adminserver sshd[19424]: Failed password for
invalid user ... ssh2
Oct 23 *04:57:34* adminserver sshd[19425]: Failed password for
invalid user ... ssh2
Oct 23 08:57:34 adminserver sshd[19426]: Failed password for
invalid user ... ssh2
don't see any timestamp added to the message.
Perhaps the timestamp is added by glibc.
When syslogd receives a message without timestamp it adds its own.
I don't know why your syslogd is logging with different times, but
I'm guessing that something is causing the timezone to change.
As I've already suggested, I think it's because the permissions on a timezone file are wrong. Check the permissions on the file /etc/timezone, the directory /etc, and the directories /usr/share/zoneinfo, /usr/share and /usr, for example.
-- Scot P. Floess 27 Lake Royale Louisburg, NC 27549
252-478-8087 (Home) 919-754-4592 (Work)
Chief Architect JPlate http://sourceforge.net/projects/jplate Chief Architect JavaPIM http://sourceforge.net/projects/javapim
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | slow ssh, gpk |
|---|---|
| Next by Date: | Re: sshd: entries in hosts.deny, Greg Wooledge |
| Previous by Thread: | Re: Odd timestampts in /var/log/messages from sshd, Robin Green |
| Next by Thread: | Re: Odd timestampts in /var/log/messages from sshd, Robin Green |
| Indexes: | [Date] [Thread] [Top] [All Lists] |