WG, I posted too quickly. Maybe Chris can hold the post. I once again reviewed RFC 3339 and it says:
-------------- 4.4. Unqualified Local Time A number of devices currently connected to the Internet run their internal clocks in local time and are unaware of UTC. While the Internet does have a tradition of accepting reality when creating specifications, this should not be done at the expense of interoperability. Since interpretation of an unqualified local time zone will fail in approximately 23/24 of the globe, the interoperability problems of unqualified local time are deemed unacceptable for the Internet. Systems that are configured with a local time, are unaware of the corresponding UTC offset, and depend on time synchronization with other Internet systems, MUST use a mechanism that ensures correct synchronization with UTC. Some suitable mechanisms are: o Use Network Time Protocol [NTP] to obtain the time in UTC. Klyne, et. al. Standards Track [Page 5] RFC 3339 Date and Time on the Internet: Timestamps July 2002 o Use another host in the same local time zone as a gateway to the Internet. This host MUST correct unqualified local times that are transmitted to other hosts. o Prompt the user for the local time zone and daylight saving rule settings. ---------------- So I think this means we should stick with that for syslog, too and make sure the device knows its timezone... Rainer