I have Norton Firewall 4.2.1(7)(Mac) installed as part of NIS. If I click on the "History" to look at recent incidents, it gives me tabs labeled "Today," "Yesterday," "Two days ago," etc., but then it randomly shuffles the events into those categories without regard to the actual dates.
For example, today is 5/14, and under "Blocked Events" for "Today" I see two entries for 5/14 and five entries for 5/10. "Yesterday" and "Two days ago" are blank, but then "Three days ago" shows nine entries for 5/11 plus two for 5/7. "Four days ago" shows a bunch of activity from 5/10, not including the entries from 5/10 that showed up under "Today." Then "Five days ago" is a mix of stuff from 6 or 7 days ago, all of which is then duplicated under the appropriate tab of either "Six days ago" or "One week ago."
Sorting log file entries by date ought to be trivially easy to get right, but Firewall often scrambles the process.
Norton Firewall 4.2.1(7), MacOS X 10.7.4 Lion, 2.66GHz Intel Core 2 Duo