Snort mailing list archives
Re: [Slightly OT]: what syslog daemon actually ignores the client timestamp?
From: Andreas Östling <andreaso () it su se>
Date: Fri, 28 Jun 2002 07:41:00 +0200 (CEST)
On Fri, 28 Jun 2002, Jason Haar wrote:
This can't be right. However, both sysklogd and syslog-ng have this problem - they don't ignore timestamps. syslog-ng has a "use_time_recvd" option that sounds like it should do the job - but apparently that only affects file creation macros...
It only affect the macros, but you can use the macros like this: destination foo { file("/var/log/foo.log" template("$DATE $HOST $MSG\n")); }; And you should get the timestamps in UTC. Regards, Andreas Östling ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Caffeinated soap. No kidding. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- [Slightly OT]: what syslog daemon actually ignores the client timestamp? Jason Haar (Jun 27)
- Re: [Slightly OT]: what syslog daemon actually ignores the client timestamp? Andreas Östling (Jun 27)