Timestamp weirdness in apache and sendmail in FBSD 4.6-stable

[Scott Crain]

The gist of the problem is that in some heavy use applications, I see 
timestamps swap between GMT time and the local CST(CDT) time in the 
logs, mainly. This is really pretty nasty when you're trying to do 
decent web stats, as it throws the time calculations out of whack, and 
ends up making you use 6-8 hours of logs each time.

Any idea what would cause this? It's a pretty heavily worked machine, 
running a loaded down mysql server along with a huge stack of web 
traffic, and a pretty small mail load in comparison.

While the examples show the timezones alternating one-to-one, it's not 
this way in practice. it's more an occasional thing that happens. these 
ARE however consecutive logged lines.

Here's some log excerpts to show what it's doing:

apache: note the -0500 and +0000 swapping.

149.houston-10rh16rt.tx.dial-access.att.net - - [19/May/2003:01:04:02 
-0500] "GE
T /parts/pix-dark.gif HTTP/1.1" 304 - 
"http://www.megatokyo.com/index.php?strip_
id=362" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 95; AT&T CSM6.0)"

12-231-92-251.client.attbi.com - - [19/May/2003:06:04:02 +0000] "GET 
/parts/mt2-
head-top.gif HTTP/1.1" 304 - 
"http://www.megatokyo.com/index.php?strip_id=400" "
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461; .NET CLR 
1.0.3705)"

12-231-92-251.client.attbi.com - - [19/May/2003:01:04:02 -0500] "GET 
/parts/spac
er.gif HTTP/1.1" 304 - "http://www.megatokyo.com/index.php?strip_id=400" 
"Mozill
a/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461; .NET CLR 1.0.3705)"

host-66-81-242-125.rev.o1.com - - [19/May/2003:06:04:02 +0000] "GET 
/index.php?s
trip_id=198 HTTP/1.1" 200 50889 
"http://www.megatokyo.com/index.php?strip_id=197
" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)"

-----------

sendmail: in this case, it's sm-mta logging one timestamp, and sendmail 
logging the other... that I think I can work out. =) just had to paste 
it into another window to see it. I'll leave the excerpt here, though.


Jun  8 00:00:47 Makoto sm-mta[29137]: ruleset=check_relay, 
arg1=12-206-108-189.c
lient.attbi.com, arg2=12.206.108.189, 
relay=12-206-108-189.client.attbi.com [12.
206.108.189], reject=550 5.7.1 Mail from  12.206.108.189 rejected. See 
http://sp
amcop.net/bl.shtml?12.206.108.189

Jun  8 05:04:20 Makoto sendmail[29232]: h5854FZI029232: from=www, 
size=1127, cla
ss=0, nrcpts=1, 
msgid=<200306080504.h5854FZI029232 at Makoto.Megatokyo.Com>, relay=
www at localhost

Jun  8 00:04:25 Makoto sm-mta[29234]: h5854K6u029234: 
from=<www at Makoto.Megatokyo
.Com>, size=1319, class=0, nrcpts=1, 
msgid=<200306080504.h5854FZI029232 at Makoto.M
egatokyo.Com>, proto=ESMTP, daemon=MTA, relay=www at localhost [127.0.0.1]

Jun  8 05:04:25 Makoto sendmail[29232]: h5854FZI029232: 
to=munged_address at yahoo.com
, ctladdr=www (80/80), delay=00:00:10, xdelay=00:00:05, mailer=relay, 
pri=30192,
 relay=localhost.my.domain. [127.0.0.1], dsn=2.0.0, stat=Sent 
(h5854K6u029234 Me
ssage accepted for delivery)