I got rather lost in post #15. So let me just make a few observations that
might be relevant.
- In edgy (the most recent Ubuntu I've used), there is a /etc/network/if-up.d/ntpdate script that by default will attempt to sync time (using ntpdate) when a network connection comes up. The config file for this script is /etc/default/ntpdate. If you want to suppress the attempted time sync, unset NTPSERVERS in the config file.
- The command ps -f -C ntpd will show you whether a NTP daemon is running. You can also monitor network traffic for udp/123 using wireshark or tcpdump (or any other packet sniffer).
- If you are dual/multi booting with a MS OS, you need to tell all other OSes on that system that the hardware clock is set to local time. Since I now find out you have two Linux OSes installed, I am wondering if one of them still shows the hardware clock as being UTC. If so, and it automatically attempts to sync time when an interface comes up, that will screw up everything.
Please note that
/etc/network/if-up.d/ntpdate is part of the
ntpdate package and is
not part of the
ntp-simple or
ntp-server package. (At least in
edgy.)
EDIT: I seriously doubt that anyting associated with X or GDM is doing anything to your time. Also, I believe if you use the default
/etc/syslog.conf file that everything you get from
dmesg also ends up in
/var/log/syslog. There is also
/var/log/boot which records some of the boot sequence. (It contains escape characters which makes
less suspect it is a binary file. But it is ASCII.)
EDIT2: If you want to check what happens w/o starting X, GDM, etc., and also not starting a number of other services, you can boot into single user mode ("recovery mode" in the GRUB menu). This will start everything in /etc/rcS but not much else. You will be running as
root so be careful.