[Snort-devel] [ snort-Bugs-470318 ] error displaying date/time in UTC

noreply at ...12... noreply at ...12...
Sun Oct 21 17:45:01 EDT 2001


Bugs item #470318, was opened at 2001-10-11 10:41
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=470318&group_id=3357

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
>Assigned to: Martin Roesch (roesch)
Summary: error displaying date/time in UTC

Initial Comment:
I'm using Version 1.8.1-RELEASE (Build 74)

While TZ=+0200, Snort produces the following:
snort -c snort.conf -r newdat3 -y -N -q -A console
09/16/01-22:24:25.575901  [**] [1:615:1] SCAN Proxy
09/17/01-01:53:03.917398  [**] [111:3:1] spp_stream4: 
Delta is about three hours and a half.

And now with timestamps in UTC:
snort -c snort.conf -r newdat3 -y -N -q -A console -U
09/16/01-20:24:25.575901  [**] [1:615:1] SCAN Proxy 
09/17/01-23:53:03.917398  [**] [111:3:1] spp_stream4:
Delta now is more than 24 hours!

Snort subtracts the offset of 2 hours, encountering an 
underflow. It corrects the time, but neglects to carry 
the underflow over to the date.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=103357&aid=470318&group_id=3357




More information about the Snort-devel mailing list