Time zone question in syslog

[Joost van Baal]

On Sat, Jun 16, 2001 at 12:29:37PM -0400, Francis J. Lacoste wrote:
> In syslog logs, shouldn't we interpret the time zone as the local one
> rather than UTC ?

I have chosen UTC since there is no mechanism to know where the log
came from.  (At least in a responder-like setup.)  If one assumes
the machine running lire is in the same timezone as the machine which
generated the log, we of course should use local time.  The best thing to
do would be to make it some option somewhere.  Currently we're using the
email subject in a message sent to the responder, to indicate wether the
log was anonimized.  We could use something in the subject to indicate
timezone, but I doubt wether this would be the nicest way to handle it.
Don't know any really nice solution now...  A similar problem is in the
lacking of the year in syslog timestamps, btw.  (I'm not really happy
with syslog timestamps, as you could've guessed by now.)

Bye,

Joost


-- 
To UNSUBSCRIBE, email to development-request at logreport.org with a subject of 
"unsubscribe". Trouble? Send an email with subject "help" to 
development-request at logreport.org