/var/log/messages file on an openSUSE 11.2 server shows invalid timestamps. Specifically, the timezone seems to be off for whatever process manages this file. I am unsure whether the times are supposed to be in UTC or in the server's local timezone, but currently they are in neither.
Example: UTC time is 8:14, which would be 9:14 in server local time, but a newly added line in
/var/log/messages has a timestamp of 7:14. I am suspecting this to be the reason fail2ban does not ban anybody.
Different processes are adding lines to the log file, for instance cron and sshd, and both have invalid timestamps. The server's time has been updated and the server has not been restarted since, so could this possibly be a reason for the invalid timestamps?