troglobit / sysklogd

BSD syslog daemon with syslog()/syslogp() API replacement for Linux, RFC3164 + RFC5424
https://troglobit.com/sysklogd.html
Other
93 stars 20 forks source link

Add option to always trust kernel timestamp, even after suspend/resume #42

Closed troglobit closed 2 years ago

troglobit commented 2 years ago

In 9f6fbb3 a workaround for crazy out-of-sync kernel timestamps was added. The support is unconditional, meaning as soon as syslogd has started up and emptied the kernel ring buffer, it goes into a new mode of operation where kernel timestamps are ignored and the current time is used instead.

This behavior may not be what most user expect, so an advanced option to disable this behavior could be useful.