Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The /var/log/messages file on an openSUSE 11.2 server shows invalid timestamps. Specifically, the timezone seems to be off for whatever process manages this file. I am unsure whether the times are supposed to be in UTC or in the server's local timezone, but currently they are in neither.

Example: UTC time is 8:14, which would be 9:14 in server local time, but a newly added line in /var/log/messages has a timestamp of 7:14. I am suspecting this to be the reason fail2ban does not ban anybody.

Different processes are adding lines to the log file, for instance cron and sshd, and both have invalid timestamps. The server's time has been updated and the server has not been restarted since, so could this possibly be a reason for the invalid timestamps?

share|improve this question
up vote 3 down vote accepted

Do you have NTP installed??

Are you using a UTC clock with the correct timezone?

Note: Im in Europe ( so i know that im +1 on UTC )

You should only have to set the time correctly (perhaps restarting a daemon or two )

share|improve this answer
We are using ntpd, though it was added later (neither server nor daemons were restarted since). Which demons would I have to restart to account for the time change? – GregC Nov 18 '10 at 9:42
if you type 'date' you should get the right time.. if so.. just restart a daemon thats logging wrong, and test it.. (it might be just simpler if your able to restart the server :D ) – Arenstar Nov 18 '10 at 9:44
Restarting the syslog daemon has indeed helped. Thanks! – GregC Nov 18 '10 at 9:55
Ahhh great :D glad to have helped solved your problems.. – Arenstar Nov 18 '10 at 11:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.