Florin Andrei writes: > The true solution is to modify syslogd. [...] > Changing the code to use local timestamps instead of the ones provided > by the datagrams should be no big deal. Some external configuration flag > could change the behaviour between the default (use the datagrams' > timestamps, or use local time). syslog-ng already supports this, with its "use_time_recvd()" option. You can also do your remote logging via TCP to reduce the chance that you are receiving spoofed data. _______________________________________________ LogAnalysis mailing list LogAnalysisat_private http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2b30 : Thu Dec 05 2002 - 12:50:31 PST