I just noticed that a range of log entries in /var/log/syslog.1 are out of order. Here's an abbreviated sample:
$ awk '{print $1, $2, $3}' syslog.1 | uniq > natural
$ sort natural > sorted
$ diff --side-by-side natural sorted
Dec 6 01:28:39 Dec 6 01:28:39
Dec 6 01:39:10 Dec 6 01:39:10
Dec 6 01:39:59 Dec 6 01:39:59
Dec 7 20:04:26 <
Dec 7 20:04:27 <
Dec 7 20:04:28 <
Dec 7 19:06:12 Dec 7 19:06:12
Dec 7 19:06:13 Dec 7 19:06:13
Dec 7 19:06:15 Dec 7 19:06:15
> Dec 7 20:04:26
> Dec 7 20:04:27
> Dec 7 20:04:28
Dec 7 20:07:02 Dec 7 20:07:02
Dec 7 20:07:03 Dec 7 20:07:03
Dec 7 20:07:06 Dec 7 20:07:06
The Dec 7 20:04 entries are moved when the log is sorted. Here is the full sample.
Why does this happen?