From owner-freebsd-questions@FreeBSD.ORG Tue Oct 4 17:23:20 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 498751065674 for ; Tue, 4 Oct 2011 17:23:20 +0000 (UTC) (envelope-from web@3dresearch.com) Received: from smtp.3dresearch.com (dorabella.3dresearch.com [66.167.251.2]) by mx1.freebsd.org (Postfix) with ESMTP id 125578FC15 for ; Tue, 4 Oct 2011 17:23:19 +0000 (UTC) Received: from fracasso.3dresearch.com (pool-72-95-206-99.pitbpa.east.verizon.net [72.95.206.99]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by vmail.3dresearch.com (Postfix) with ESMTP id 0AC6B1F19B; Tue, 4 Oct 2011 13:23:19 -0400 (EDT) Received: from fracasso.3dresearch.com (localhost [127.0.0.1]) by fracasso.3dresearch.com (Postfix) with SMTP id C61925C19; Tue, 4 Oct 2011 13:23:17 -0400 (EDT) Date: Tue, 4 Oct 2011 13:23:14 -0400 From: Janos Dohanics To: Matthew Seaman Message-Id: <20111004132314.8cc11552.web@3dresearch.com> In-Reply-To: <4E8B29FB.1050200@infracaninophile.co.uk> References: <20111004002910.4c134251.web@3dresearch.com> <4E8AC616.4000904@infracaninophile.co.uk> <20111004095026.69839e89.web@3dresearch.com> <4E8B29FB.1050200@infracaninophile.co.uk> X-Mailer: Sylpheed 3.1.0 (GTK+ 2.24.6; amd64-portbld-freebsd8.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: FreeBSD Questions Subject: Re: Timestamps shifted by 8 hours X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Oct 2011 17:23:20 -0000 On Tue, 04 Oct 2011 16:44:59 +0100 Matthew Seaman wrote: > On 04/10/2011 14:50, Janos Dohanics wrote: > > So, I asked the wrong question. The question I should be asking is: > > Why are timestamps wrong in /var/log/filter.log even though date > > shows the correct time? However, this question I should ask the > > pfSense list... > > Hmmm... > > Somewhat of an outside chance, but timezones can be set per-process, > just by setting TZ in the environment. Make sure that procfs(5) is > mounted, and try running > > ps -auxwwwe | grep TZ Well, my pfSense installation does not have /proc, and I'd hate to mess with a production system of a customer... > If there is a process with TZ set in the environment, especially if it > is set to 'America/Los_Angeles' or similar (9 hours offset from UTC is > typical for PDT)[*] that's probably your smoking gun right there. Do > you have West Coast based users/admins who might have restarted some > processes or reloaded firewall rulesets? > > Cheers, > > Matthew > > [*] Or else on Guam or some other part of the Eastern Pacific? I'm the only one (I hope...) with access to this box... -- Janos Dohanics