- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
MX syslog message format question
I'm writing a parser for MX messages. I've read the Syslog Event Types and Log Samples, but haven't found what some of the info is. Many of the messages start with a dotted number that includes the unix epoch, but I don't know what the second half is.
For example, on the doc page under "ids-alerts: ids signature matched" there is this sample
1377449842.514782056 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1377449842.512569 direction=ingress protocol=tcp/ip src=74.125.140.132:80
The 1377449842 would be "GMT: Sunday, August 25, 2013 4:57:22 PM"
But what is the 514782056 part?
Thanks.
Thanks!
Solved! Go to solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think (and could be wrong) that this is a Linux 19 digit time stamp - which allows you to specify times down to a nanosecond.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think (and could be wrong) that this is a Linux 19 digit time stamp - which allows you to specify times down to a nanosecond.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Kudos!
The epoch, in milliseconds ...
The Linux/Ubuntu equivalent is date +%s.%N:
Linux $ date +%s.%N
1403377762.035521859
