LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-23-2008, 07:22 PM   #1
tsir112
LQ Newbie
 
Registered: Dec 2008
Posts: 3

Rep: Reputation: 0
the kernel audit log message pointer


i need to be able to provide dates and times for accounts accessing a RHEL4 system. in the var/log/audit audit logs i see entries with the following timestamps. my research has told me this is the kernel audit log message pointer with an unformatted timestamp. my question is, how do i get a formatted date and time for this entry?

msg=audit(1230051903.526:1929915)

i need this info for PCI audits and i am totally stumped. i am a windows guy thrown into a Linux environment, so im learning as i go...
 
Old 12-24-2008, 05:35 AM   #2
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Hi.

The first number '1230051903' is in Unix time, with is the no. of seconds since 1970:01:01 00:00 UTC (the epoch).

You can convert this to human readable form with:
$ date -d @1230051903

Dave
 
Old 12-30-2008, 01:52 PM   #3
tsir112
LQ Newbie
 
Registered: Dec 2008
Posts: 3

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by ilikejam View Post
Hi.

The first number '1230051903' is in Unix time, with is the no. of seconds since 1970:01:01 00:00 UTC (the epoch).

You can convert this to human readable form with:
$ date -d @1230051903

Dave
i get an error:

date: invalid date `@1230657301'
 
Old 01-02-2009, 10:16 AM   #4
ilikejam
Senior Member
 
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96
Maybe RHEL4 has an old coreutils package.

There's plenty of online converters...
http://www.google.co.uk/search?q=uni...ient=firefox-a

Dave
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
kernel audit - var/log/messages timinator Linux - Security 1 11-13-2007 04:02 PM
Unknown Audit Message OR13 Linux - Software 0 03-23-2007 02:17 PM
audit cupsd denied message spooon Fedora 3 07-15-2006 10:25 PM
/var/log/messages - kernel: audit(1107868785.573:0): avc: denied { getattr } lothario Linux - Security 2 02-10-2005 05:24 AM
Kernel Message:unable to handle kernel NULL pointer dereference at virtual address... dave_d Linux - General 0 02-14-2001 06:01 PM


All times are GMT -5. The time now is 06:13 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration