Firewall logs 1 hour behind/Timestamp issues with openvpn & system logs
-
All of my firewall logs are one hour behind even when I select the correct timezone. I live in Utah I select either Denver or MST7DST and I am behind an hour in my logs. The time on my box is correct, its just the logs that are not displaying correctly.
Tue May 3 14:22:55 MDT 2011
May 2 Snapshot RC-1Firewall logs show 13:22 on hour behind.
System logs are correct at 14:22 how ever times seem to jump around look at this changes from may 3 to may 4:
May 3 11:07:07 apinger: ALARM: GW_WAN(xx.xx.xx.xx) *** down ***
May 3 11:07:17 check_reload_status: reloading filter
May 3 11:08:04 check_reload_status: Rewriting resolv.conf
May 4 06:08:08 dnsmasq[434]: no servers found in /etc/resolv.conf, will retry
May 4 06:08:08 dnsmasq[434]: no servers found in /etc/resolv.conf, will retry
May 3 11:08:28 check_reload_status: Rewriting resolv.conf
May 3 12:08:30 php: : ROUTING: change default route to xx.xx.xx.xx
May 3 11:08:30 apinger: Exiting on signal 15.
May 3 11:08:31 check_reload_status: reloading filter
May 3 12:08:31 apinger: Starting Alarm Pinger, apinger(48361)
May 3 12:08:36 php: : Resyncing OpenVPN instances for interface WAN.
May 3 12:08:36 kernel: ovpnc1: link state changed to DOWN
May 3 11:08:36 check_reload_status: reloading filter
May 3 11:08:36 check_reload_status: reloading filter
May 3 12:08:37 kernel: ovpnc1: link state changed to UP
May 3 11:08:37 check_reload_status: rc.newwanip starting ovpnc1
May 3 12:08:37 php: : rc.newwanip: Informational is starting ovpnc1.
May 3 12:08:37 php: : rc.newwanip: on (IP address: 10.0.8.2) (interface: ) (real interface: ovpnc1).
May 3 11:08:37 check_reload_status: reloading filter
May 3 12:08:37 php: : The command '/usr/bin/killall 'ntpd'' returned exit code '1', the output was 'killall: warning: kill -TERM 6233: No such process'
May 3 12:08:38 php: : OpenNTPD is starting up.
May 3 12:08:38 php: : pfSense package system has detected an ip change -> … Restarting packages.
May 3 12:08:38 php: : Resyncing configuration for all packages.
May 4 06:09:59 dnsmasq[434]: reading /etc/resolv.conf
May 4 06:09:59 dnsmasq[434]: using nameserver xx.xx.xx.xx#53
May 4 06:09:59 dnsmasq[434]: using nameserver 2xx.xx.xx.xx#53Openvpn logs might be jumping around as well, look at these. May 3 11:08:36 jump to May 3 12:08:36? Or am I reading these wrong?
May 3 11:08:31 openvpn[52453]: UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
May 3 11:08:31 openvpn[52453]: Peer Connection Initiated with [AF_INET]67.42.251.136:1194
May 3 11:08:32 openvpn[52453]: Initialization Sequence Completed
May 3 11:08:36 openvpn[52453]: event_wait : Interrupted system call (code=4)
May 3 11:08:36 openvpn[52453]: /usr/local/sbin/ovpn-linkdown ovpnc1 1500 1560 10.0.8.2 10.0.8.1 init
May 3 11:08:36 openvpn[52453]: SIGTERM[hard,] received, process exiting
May 3 12:08:36 openvpn[58229]: OpenVPN 2.2.0 i386-portbld-freebsd8.1 [SSL] [LZO2] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Apr 28 2011
May 3 12:08:36 openvpn[58229]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
May 3 12:08:37 openvpn[58229]: TUN/TAP device /dev/tun1 opened
May 3 12:08:37 openvpn[58229]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
May 3 12:08:37 openvpn[58229]: /sbin/ifconfig ovpnc1 10.0.8.2 10.0.8.1 mtu 1500 netmask 255.255.255.255 up
May 3 12:08:37 openvpn[58229]: /usr/local/sbin/ovpn-linkup ovpnc1 1500 1560 10.0.8.2 10.0.8.1 init
May 3 12:08:37 openvpn[63195]: UDPv4 link local (bound): [AF_INET]xx.xx.xx.xx
May 3 12:08:37 openvpn[63195]: UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
May 3 12:08:40 openvpn[63195]: Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
May 3 12:08:40 openvpn[63195]: Initialization Sequence Completedany help would be great.
Thanks,
Rhett
-
Time zone setting are only fully applied after a reboot. Select the Denver time zone, reboot the router, and everything should be good again.
