From owner-freebsd-questions@FreeBSD.ORG  Wed Dec 21 17:35:57 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C000E16A420
	for <freebsd-questions@freebsd.org>;
	Wed, 21 Dec 2005 17:35:57 +0000 (GMT)
	(envelope-from redtick@sbcglobal.net)
Received: from web81211.mail.mud.yahoo.com (web81211.mail.mud.yahoo.com
	[68.142.199.115])
	by mx1.FreeBSD.org (Postfix) with SMTP id 0F63A43D8A
	for <freebsd-questions@freebsd.org>;
	Wed, 21 Dec 2005 17:35:49 +0000 (GMT)
	(envelope-from redtick@sbcglobal.net)
Received: (qmail 96011 invoked by uid 60001); 21 Dec 2005 17:35:46 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net;
	h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
	b=OM1DBtxSIWBArZGF8Sw5CnAEIHBvww8h7fh5FiOfkLW9ac9fUGYN22njq6095BdS3v9pd1p3iNZWoGg1rF2dc7bThfC4E9dLXcpuvzZMkqSSYIMP1n8gQiPmP9W4rGJplk2op8tu89FxZ3GFx3D9YI+QEVMLDXe040167bN0T7o=
	; 
Message-ID: <20051221173546.96009.qmail@web81211.mail.mud.yahoo.com>
Received: from [12.171.187.21] by web81211.mail.mud.yahoo.com via HTTP;
	Wed, 21 Dec 2005 09:35:46 PST
Date: Wed, 21 Dec 2005 09:35:46 -0800 (PST)
From: Mark Busby <redtick@sbcglobal.net>
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Time warp
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Dec 2005 17:35:57 -0000

One of my boxes took a trip of sorts. 
  From auth.log, 
    Dec 17 07:57:32 redtick sshd[56969]: 
  Dec 17 11:47:43 redtick sshd[57596]: 
  Dec 18 15:45:20 redtick sshd[61804]: 
  Dec 18 17:00:00 redtick sshd[62099]:
  Dec 18 21:18:52 redtick sshd[62776]: 
  Dec 18 21:19:18 redtick sshd[62779]:
  Dec 19 04:16:13 redtick sshd[64163]: 
  Dec 20 10:49:19 redtick sshd[68705]: 
  Dec 21 02:03:23 redtick sshd[71045]: 
  Dec 22 06:34:26 redtick sshd[75435]: 
  Dec 22 16:18:17 redtick sshd[76898]: 
  Dec 23 08:21:56 redtick sshd[79415]: 
  Dec 17 21:21:54 redtick sshd[360]: .
  Dec 17 21:21:54 redtick sshd[360]: .
  Dec 17 21:23:01 redtick sshd[519]: 
  A reboot reset the time. 
  chkrootkit returns nothing found.
  Now some things are not working right because of this, but the main one is ddclient.
  Where does ddclient store the time info? A reinstall of ddclient did not clear the time problem.
  Thanks