fwtmp(8)						      System Manager's Manual							  fwtmp(8)

NAME

       fwtmp, acctwtmp, wtmpfix - Modify connect time accounting records to change formats and to make corrections in the records

SYNOPSIS

       fwtmp [-ic]

       acctwtmp 'Reason'

       wtmpfix [File . . .]

FLAGS

       The  fwtmp command accepts ASCII records in the type utmp structure format as input.  The fwtmp command converts output to type utmp struc-
       ture formatted binary records.  The fwtmp command converts ASCII type utmp structure formatted input records to binary output records.

DESCRIPTION

   fwtmp [-ic]
       The fwtmp command reads records from standard input and writes records to standard output. Normally, information in record  fields  of  the
       /var/adm/wtmp  file is entered as binary data by the init and login programs during the life of the /var/adm/wtmp file. These /var/adm/wtmp
       file records have nine fields formatted according to members of a type utmp structure defined in the utmp.h include file. The fwtmp command
       is also capable of writing properly formatted ASCII records from standard input into a file when you use the -i flag.

       Whenever  you enter properly formatted ASCII records for conversion to binary records using the -i flag from the standard input device, you
       must enter data for each field of the 9-field record in the same order as that of type utmp structure members using a space as a field sep-
       arator.	The  following table lists record fields in the order they should be entered, the type utmp structure member name, and the purpose
       and entry character length.  The user login name, which must have exactly sizeof(ut_user) characters.  The  inittab  ID,  which	must  have
       exactly	sizeof(ut_id) characters.  The device name, which must have exactly sizeof(ut_line) characters.  The process ID, which must have 5
       decimal places.	The type of entry, which must have 2 decimal places. The type of entry may have any one of several symbolic constant  val-
       ues.  The symbolic constants are defined in the utmp.h header file.  The process termination status, which must have 4 decimal places.  The
       process exit status, which must have 4 decimal places.  The starting time, which must have 10 decimal places.   The  hostname,  which  must
       have exactly sizeof(ut_host) characters.

       All record field entries you make from standard input must be separated by a space. Also you must fill all string fields with blank charac-
       ters up to the maximum string size. All decimal values must have the specified number of decimal places with preceding 0s (zeros)  to  fill
       empty digit positions. The actual size of character arrays can be found in the utmp.h include file.

   acctwtmp 'Reason'
       The acctwtmp command is called by the runacct shell procedure to write a utmp formatted record to standard output with the current date and
       time together with a 'Reason' string (sizeof(ut_line) characters or less) that you must also enter.

   wtmpfix [File ...]
       The wtmpfix command is called by the runacct shell procedure to examine standard input or File records in the  wtmp  format  for  corrupted
       date  and  timestamp  entries.  Whenever a corrupted entry is detected, the wtmpfix command corrects date and timestamp inconsistencies and
       writes corrected records to standard output. Whenever the acctcon1 command runs, and a date and timestamp in a /var/adm/wtmp file is incor-
       rect,  an  error  is  generated	when  the  first corrupted entry is encountered. The acctcon1 process is aborted whenever such an error is
       detected.

       The wtmpfix command also checks the validity of the name field to ensure that the name consists only of alphanumeric characters, a $  (dol-
       lar  sign),  or spaces. Whenever an invalid name is detected, the wtmpfix command changes the login name to INVALID and writes a diagnostic
       message to standard error. In this way, the wtmpfix command reduces the likelihood that the acctcon2 command may fail.

       Each time a date is entered (on system startup or with the date command) a pair of date-change records  is  written  to	the  /var/adm/wtmp
       file.  The  first date-change record is the old date, which is entered with the string old time (the OTIME_MSG string) in the ut_line field
       and the flag OLD_TIME in the ut_type field. The second record is the new date, which is entered with the string	new  time  (the  NTIME_MSG
       string) in the ut_line field and the flag NEW_TIME in the ut_type field. The wtmpfix command uses these records to synchronize all date and
       time stamps in the /var/adm/wtmp file. The date-change record pair is then removed.

RESTRICTIONS

       You should not use the fwtmp command to correct connect-time accounting records because the utmp structure format members are  not  in  the
       correct order for this operation.

EXAMPLES

       To  convert  binary  /var/adm/wtmp records in type utmp structure format to an ASCII file called dummy.file, enter a command similar to the
       following: /usr/sbin/acct/fwtmp < /var/adm/wtmp > dummy.file The content of  binary  file  /var/adm/wtmpfile  as  input	is  redirected	to
       dummy.file  as  ASCII  output.	To  convert  records  in  an  ASCII  type  utmp  structure  formatted  file to a binary output file called
       /var/adm/wtmp, enter an fwtmp command with the -ic flag similar to the following: /usr/sbin/acct/fwtmp -ic < dummy.file > /var/adm/wtmp The
       content of ASCII file dummy.file as input is redirected to binary file /var/adm/wtmp as output.

FILES

       Specifies  the  command	path.	Specifies the command path.  Specifies the command path.  Header file defining structures used to organize
       login information.  Database file for currently logged in users.  Login/logout database file.

RELATED INFORMATION

       Commands:  acct(8), acctcon(8), acctmerg(8), date(1), runacct(8)

       Functions: acct(2) delim off

																	  fwtmp(8)