From owner-freebsd-questions@FreeBSD.ORG Sun Jun 8 01:33:49 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7193F37B404 for ; Sun, 8 Jun 2003 01:33:49 -0700 (PDT) Received: from mail.speakeasy.net (mail11.speakeasy.net [216.254.0.211]) by mx1.FreeBSD.org (Postfix) with ESMTP id BF80843FCB for ; Sun, 8 Jun 2003 01:33:48 -0700 (PDT) (envelope-from combine@mindspring.com) Received: (qmail 27522 invoked from network); 8 Jun 2003 08:33:47 -0000 Received: from unknown (HELO mindspring.com) ([216.27.177.157]) (envelope-sender ) by mail11.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 8 Jun 2003 08:33:47 -0000 Message-ID: <3EE2F4D4.1000705@mindspring.com> Date: Sun, 08 Jun 2003 01:33:24 -0700 From: Scott Crain User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030529 X-Accept-Language: en, ja MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Timestamp weirdness in apache and sendmail in FBSD 4.6-stable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Jun 2003 08:33:49 -0000 The gist of the problem is that in some heavy use applications, I see timestamps swap between GMT time and the local CST(CDT) time in the logs, mainly. This is really pretty nasty when you're trying to do decent web stats, as it throws the time calculations out of whack, and ends up making you use 6-8 hours of logs each time. Any idea what would cause this? It's a pretty heavily worked machine, running a loaded down mysql server along with a huge stack of web traffic, and a pretty small mail load in comparison. While the examples show the timezones alternating one-to-one, it's not this way in practice. it's more an occasional thing that happens. these ARE however consecutive logged lines. Here's some log excerpts to show what it's doing: apache: note the -0500 and +0000 swapping. 149.houston-10rh16rt.tx.dial-access.att.net - - [19/May/2003:01:04:02 -0500] "GE T /parts/pix-dark.gif HTTP/1.1" 304 - "http://www.megatokyo.com/index.php?strip_ id=362" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 95; AT&T CSM6.0)" 12-231-92-251.client.attbi.com - - [19/May/2003:06:04:02 +0000] "GET /parts/mt2- head-top.gif HTTP/1.1" 304 - "http://www.megatokyo.com/index.php?strip_id=400" " Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461; .NET CLR 1.0.3705)" 12-231-92-251.client.attbi.com - - [19/May/2003:01:04:02 -0500] "GET /parts/spac er.gif HTTP/1.1" 304 - "http://www.megatokyo.com/index.php?strip_id=400" "Mozill a/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461; .NET CLR 1.0.3705)" host-66-81-242-125.rev.o1.com - - [19/May/2003:06:04:02 +0000] "GET /index.php?s trip_id=198 HTTP/1.1" 200 50889 "http://www.megatokyo.com/index.php?strip_id=197 " "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)" ----------- sendmail: in this case, it's sm-mta logging one timestamp, and sendmail logging the other... that I think I can work out. =) just had to paste it into another window to see it. I'll leave the excerpt here, though. Jun 8 00:00:47 Makoto sm-mta[29137]: ruleset=check_relay, arg1=12-206-108-189.c lient.attbi.com, arg2=12.206.108.189, relay=12-206-108-189.client.attbi.com [12. 206.108.189], reject=550 5.7.1 Mail from 12.206.108.189 rejected. See http://sp amcop.net/bl.shtml?12.206.108.189 Jun 8 05:04:20 Makoto sendmail[29232]: h5854FZI029232: from=www, size=1127, cla ss=0, nrcpts=1, msgid=<200306080504.h5854FZI029232@Makoto.Megatokyo.Com>, relay= www@localhost Jun 8 00:04:25 Makoto sm-mta[29234]: h5854K6u029234: from=, size=1319, class=0, nrcpts=1, msgid=<200306080504.h5854FZI029232@Makoto.M egatokyo.Com>, proto=ESMTP, daemon=MTA, relay=www@localhost [127.0.0.1] Jun 8 05:04:25 Makoto sendmail[29232]: h5854FZI029232: to=munged_address@yahoo.com , ctladdr=www (80/80), delay=00:00:10, xdelay=00:00:05, mailer=relay, pri=30192, relay=localhost.my.domain. [127.0.0.1], dsn=2.0.0, stat=Sent (h5854K6u029234 Me ssage accepted for delivery)