vsftpd log timestamps issue

ilikejam · 05-26-2005, 08:41 PM

Hi all.

I'm using the latest FC3 version of vsftpd, and I'm getting strange timestamps on my logs.
The log_ftp_protocol=YES option is set, so the following is from /var/log/vsftpd.log:

Code:

Thu May 26 22:15:29 2005 [pid 17864] [fromilj] FTP response: Client "XXX.XXX.XXX.XXX", "331 Please specify the password."
Thu May 26 23:15:29 2005 [pid 17866] CONNECT: Client "XXX.XXX.XXX.XXX"
Thu May 26 22:15:29 2005 [pid 17866] FTP response: Client "XXX.XXX.XXX.XXX", "220 ILikeJam FTP. Access to this server is restricted to authorised users only. Logs are being watched, and crackers will be wedgied."
Thu May 26 22:15:29 2005 [pid 17866] FTP command: Client "XXX.XXX.XXX.XXX", "USER fromilj"
Thu May 26 22:15:29 2005 [pid 17866] [fromilj] FTP response: Client "XXX.XXX.XXX.XXX", "331 Please specify the password."
Thu May 26 22:15:30 2005 [pid 17864] [fromilj] FTP command: Client "XXX.XXX.XXX.XXX", "PASS <password>"
Thu May 26 23:15:30 2005 [pid 17863] [fromilj] OK LOGIN: Client "XXX.XXX.XXX.XXX"
Thu May 26 23:15:30 2005 [pid 17867] [fromilj] FTP response: Client "XXX.XXX.XXX.XXX", "230 Login successful."
Thu May 26 22:15:30 2005 [pid 17866] [fromilj] FTP command: Client "XXX.XXX.XXX.XXX", "PASS <password>"
Thu May 26 23:15:30 2005 [pid 17865] [fromilj] OK LOGIN: Client "XXX.XXX.XXX.XXX"

As you can see, the timestamps vary by an hour (the latter 23:15:XX time being the correct local time). I've tried use_localtime=YES and =NO, and nothing changes.

It's not a showstopper, but I'd like to know what's causing it.
Any ideas?

Cheers.

Dave

BigNate · 05-28-2005, 01:09 PM

hmmm, no idea, other than it appears that all the logs with the right time are queried on connection...which could mean that the client that is connecting has the right time, while the server is off by an hour. Now the ftp server could always use it's own clock and I could be way off, but it might be worth a look.

ilikejam · 05-29-2005, 11:53 AM

Yeah, I was thinking something similar, but the times are a bit too accurate.

I saw something about times mentioned in the vsftpd changelog, so maybe an update is in order...

Cheers.

Dave