Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Timestamps in syslog for 'charon' and 'filterlog' seem to use different clocks

    Scheduled Pinned Locked Moved General pfSense Questions
    4 Posts 2 Posters 769 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pax
      last edited by

      I'm using syslog, and it appears the tiimestamps for messages from 'charon' and 'filterlog' are using different clocks - off by exactly one hour.  Is this a bug or configuration option that I've missed?

      May 13 09:02:29 172.16.101.10 charon: 06[NET] <con1|17693>sending packet: from 199.193.188.10[4500] to 199.193.188.12[4500] (76 bytes)
      May 13 08:02:31 172.16.101.10 filterlog: 7,16777216,,1000000101,igb1,match,block,in,4,0x0,,128,25012,0,none,17,udp,78,169.254.254.26,169.254.255.255,137,137,58
      May 13 08:02:31 172.16.101.10 filterlog: 7,16777216,,1000000101,igb3,match,block,in,4,0x0,,128,25012,0,none,17,udp,78,169.254.254.26,169.254.255.255,137,137,58
      May 13 08:02:31 172.16.101.10 filterlog: 7,16777216,,1000000101,igb1,match,block,in,4,0x0,,128,25013,0,none,17,udp,78,169.254.254.26,169.254.255.255,137,137,58
      May 13 08:02:31 172.16.101.10 filterlog: 7,16777216,,1000000101,igb3,match,block,in,4,0x0,,128,25013,0,none,17,udp,78,169.254.254.26,169.254.255.255,137,137,58
      May 13 08:02:32 172.16.101.10 filterlog: 7,16777216,,1000000101,igb1,match,block,in,4,0x0,,128,25014,0,none,17,udp,78,169.254.254.26,169.254.255.255,137,137,58
      May 13 08:02:32 172.16.101.10 filterlog: 7,16777216,,1000000101,igb3,match,block,in,4,0x0,,128,25014,0,none,17,udp,78,169.254.254.26,169.254.255.255,137,137,58
      May 13 09:02:33 172.16.101.10 charon: 06[IKE] <con1|17693>sending retransmit 1 of request message ID 4003774536, seq 1
      May 13 09:02:33 172.16.101.10 charon: 06[NET] <con1|17693>sending packet: from 199.193.188.10[4500] to 199.193.188.12[4500] (76 bytes)</con1|17693></con1|17693></con1|17693>

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        What time zone do you have set?
        Have you rebooted since setting the time zone?

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • P
          pax
          last edited by

          TZ - EST5EDT

          Not sure if it was rebooted after setting - I would have to think so, but don't recall.  Having said that, I did have to reboot it last week and looking at logs today I no longer see the problem.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            Try using a geographic named zone and not that one, and you would at least need to kill/restart charon and filterlog, but a reboot is best after changing time zones.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.