Time Difference

Matt Kettler mkettler at EVI-INC.COM
Mon Nov 1 20:36:55 GMT 2004


Hmm, that's quite strange.. However, consider this fact:

Neither MailScanner nor sendmail creates those timestamps.... they are
created by syslogd.

 From the looks of it, your local system clock hiccuped by 2 hours and went
back again, but MailScanner and sendmail have nothing to do with this. They
can't.

Do you have a NTP client running on that box that may have gone awry?




At 03:27 PM 11/1/2004, Mike Kercher wrote:
>Oct 31 07:52:33 www MailScanner[8666]: SophosSAVI::INFECTED::
>W32/Bagle-AU:: ./i9VFqOg14300/price.scr
>
>Oct 31 07:52:34 www MailScanner[8666]: Virus Scanning: SophosSAVI
>found 1 infections
>
>Oct 31 07:52:34 www MailScanner[8666]: Infected message i9VFqOg14300
>came from 70.113.52.139
>
>Oct 31 07:52:34 www MailScanner[8666]: Virus Scanning: Found 1 viruses
>
>Oct 31 07:52:34 www MailScanner[8666]: Filename Checks: Possible
>virus hidden in a screensaver (i9VFqOg14300 price.scr)
>
>Oct 31 07:52:34 www MailScanner[8666]: Other Checks: Found 1 problems
>
>Oct 31 09:52:34 www sendmail[14306]: i9VFqY514306: from=postmaster,
>size=1036, class=0, nrcpts=1,
>msgid=<200410311552.i9VFqY514306 at www.abby.com>, relay=root at localhost
>
>Oct 31 07:52:34 www MailScanner[8666]: Notices: Warned about 1
>messages
>
>The time that sendmail stamps in the log is correct.  The ti

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).




More information about the MailScanner mailing list