1834146 Members
2834 Online
110064 Solutions
New Discussion

sshd logging problem

 
Shakeer_1
Occasional Advisor

sshd logging problem

Hi friends,

Surprisingly my syslog.log contains the entries for sshd logging 6 hours less as compared to the system time. I mean the time for log entries for sshd are showing minus 6 hours as of the system time. Here is the sample log plz advise.

Jan 17 07:29:41 issppr3 inetd[29317]: registrar/tcp: Connection from issppr3 (10.45.42.168) at Mon Jan 17 07:29:41 2005
Jan 17 01:29:55 issppr3 sshd[29318]: Accepted password for mshakeer from 193.88.156.197 port 3377
Jan 17 07:31:41 issppr3 inetd[29345]: registrar/tcp: Connection from issppr3 (10.45.42.168) at Mon Jan 17 07:31:41 2005
2 REPLIES 2
Steven E. Protter
Exalted Contributor

Re: sshd logging problem

Please check the following:

TZ variable on the target system.

the command output for the date command

date

The date on the client system.

ntpq -p

This covers the possible sources of the issue: NTP, TZ, other clients click or time. You may need to check all of these issues on the client but probably not.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Andrew Cowan
Honored Contributor

Re: sshd logging problem

Have you changed $TZ without restarting "cron". If this is the case it will not see the time change.