On Sat, Oct 27, 2001 at 06:07:46PM -0400, Rich Salz wrote: > >tracking its divergence from UTC during the session? > > Unh, why? > > Most people don't calibrate their watches very often and that's fine for > evidence. > > Relative time, timezones -- not beyond the understanding of the courts. True, but the more evidence that you can provide that your log file timestamps are correlatable to UTC, the more convincing your argument is. I'm actually working on a whitepaper about this right now; I'll post a draft when it's ready for public consumption. -- Sweth. -- Sweth Chandramouli ; <svcat_private> President, Idiopathic Systems Consulting --------------------------------------------------------------------- To unsubscribe, e-mail: loganalysis-unsubscribeat_private For additional commands, e-mail: loganalysis-helpat_private
This archive was generated by hypermail 2b30 : Sun Oct 28 2001 - 08:21:08 PST