sleuthkit-users

[sleuthkit-users] TimeZones when configuring Host?

[Surago J. <su...@sj...>]

Hi all,

It might just be me being dumb (Very dumb), but when configuring a host
with Autopsy v2.01, is it possible to enter the time zone in the GMT
format (i.e. 'GMT-0600'), or must one enter it like 'CST6CDT' ??

The only reason I noticed this issue, was when creating a timeline for
an image, all my dates/times did not match up with another investigators
when I had entered 'GMT-0600' as opposed to 'CST6CDT'.  Fortunately I am
currently only doing research, so this isn't a big deal at the moment.

If this is not possible in the current version, perhaps this
functionality could be included in future versions?

Cheers

Surago.

Re: [sleuthkit-users] TimeZones when configuring Host?

[Brian C. <ca...@sl...>]

On Feb 8, 2005, at 4:39 AM, Surago Jones wrote:

> Hi all,
>
> It might just be me being dumb (Very dumb), but when configuring a host
> with Autopsy v2.01, is it possible to enter the time zone in the GMT
> format (i.e. 'GMT-0600'), or must one enter it like 'CST6CDT' ??

It depends on what values that your OS supports.  The safest setting is 
to use CST6CDT (because this also takes day light savings into account 
- GMT-6 does not).   If anyone knows of a list of valid timezone 
strings, I will make a pull down list for them...

brian

Re: [sleuthkit-users] TimeZones when configuring Host?

[Seth A. <sa...@im...>]

On Tue, Feb 08, 2005 at 07:56:22AM -0500, Brian Carrier wrote:
> It depends on what values that your OS supports.  The safest setting is=
=20
> to use CST6CDT (because this also takes day light savings into account=20
> - GMT-6 does not).   If anyone knows of a list of valid timezone=20
> strings, I will make a pull down list for them...

Heh, there's way too many. :)

/usr/share/zoneinfo on glibc systems has the support files for all the
timezones the glibc people know about.

The heirarchy is arranged by "major areas" having their own directories,
posix, SystemV, and 'right' directories for standardised names, and a
mess of 'old-style' names.

$ ls -F /usr/share/zoneinfo
Africa/      Chile/   Factory    Iceland      Mexico/   posix/      Univers=
al
America/     CST6CDT  GB         Indian/      Mideast/  posixrules  US/
Antarctica/  Cuba     GB-Eire    Iran         MST       PRC         UTC
Arctic/      EET      GMT        iso3166.tab  MST7MDT   PST8PDT     WET
Asia/        Egypt    GMT0       Israel       Navajo    right/      W-SU
Atlantic/    Eire     GMT-0      Jamaica      NZ        ROK         zone.tab
Australia/   EST      GMT+0      Japan        NZ-CHAT   Singapore   Zulu
Brazil/      EST5EDT  Greenwich  Kwajalein    Pacific/  SystemV/
Canada/      Etc/     Hongkong   Libya        Poland    Turkey
CET          Europe/  HST        MET          Portugal  UCT
$ ls -F /usr/share/zoneinfo/SystemV
AST4     CST6     EST5     HST10  MST7MDT  PST8PDT  YST9YDT
AST4ADT  CST6CDT  EST5EDT  MST7   PST8     YST9
$ ls -F /usr/share/zoneinfo/Canada/
Atlantic  Eastern            Mountain      Pacific       Yukon
Central   East-Saskatchewan  Newfoundland  Saskatchewan

etc etc...

This way, one can simply use: TZ=3DCanada/Pacific instead of trying to
get the right mixture of daylight savings time rules and correct offsets.

The tzset(3) manpage describes how you can create your own timezone
strings, in case you're not interested in having access to only the
timezones already on the system.

Re: [sleuthkit-users] TimeZones when configuring Host?

[Brian C. <ca...@sl...>]

On Feb 8, 2005, at 2:24 PM, Seth Arnold wrote:

> On Tue, Feb 08, 2005 at 07:56:22AM -0500, Brian Carrier wrote:
>> It depends on what values that your OS supports.  The safest setting 
>> is
>> to use CST6CDT (because this also takes day light savings into account
>> - GMT-6 does not).   If anyone knows of a list of valid timezone
>> strings, I will make a pull down list for them...
>
> Heh, there's way too many. :)

Maybe I should have phrased the question as "does anyone know of a 
basic, but not necessarily comprehensive, list of timezones"... :)

I think the easiest thing is to make a list of valid strings and put 
them in one of the help pages.

brian