On Mon, 2018-07-23 at 14:05 +0000, Dave Caplinger via rsyslog wrote: > Here are the logs from the pcap: > > from 10.46.0.114: > Jul 19 14:47:04 CES jurswm14221 %STKUNIT0-M:CP %SSH-6-CONNECTION: > Disconnected from 10.223.0.100 > Jul 19 14:47:05 CES jurswm14221 %STKUNIT0-M:CP %SEC-5-LOGOUT: Exec > session is terminated for user jurswadmin on line vty0 ( 10.223.0.100 > ) (Reason : User Request) > > Both senders seem to be sending malformed log lines to me since > whatever "CES" means, it's not the hostname of the device sending the > log. (And I'm betting 'jurswm22221' and 'jurswm14221' are the actual > hostnames.)
I'd guess timezone. Central European Summer time? _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
