02-28-2008
During a normal reboot the wtmp file is not cleared, so perhaps it was due to the upgrade or some other effect (deleted somehow by a process started from inittab, a process in the k-scripts in /etc/rc.d of runlevel 2 or something such).
bakunin
8 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Here's a usefull perl script to trim the wtmp file,
in case it got too big, which happens sometimes, or got curropted (which also happens often).
You could learn from here how to parse the wtmp file...
but of course for just reading its content always simply use "last" like Neo said....
... (0 Replies)
Discussion started by: me2unix
0 Replies
2. News, Links, Events and Announcements
http://www.cnn.com/2003/TECH/01/07/dvd.johansen/index.html (1 Reply)
Discussion started by: Neo
1 Replies
3. Programming
Anyone have any idea on how to display the fields for each record stored in the wtmp file using C? Am I correct in thinking that the info stored in wtmp is in binary and that utmpx will be of some help? Being a beginner, I can come up with bits and pieces of what I might need in order to do the... (1 Reply)
Discussion started by: eclapton1
1 Replies
4. Forum Support Area for Unregistered Users & Account Problems
Hotmail cleared my email account before I had a chance to activate it. Can a admin re-send the activation email or activate my username?
thanks (2 Replies)
Discussion started by: prkfriryce
2 Replies
5. AIX
Hello everyone
I have a problem with the file wtmp that is on /var/adm
This file was not on this directory (adm).
I try creating a new file with the correct rights (644) and owner (adm:adm)
but It doesnt work.
If I type the last command i get this
last
ora10g ... (4 Replies)
Discussion started by: lo-lp-kl
4 Replies
6. AIX
In our operating procedures, if a workstation has a space problem in the /var filesystem, one of the most frequent case we were told is the size of the /var/adm/wtmp file.
Someone once told me it is dangerous to do this. Is it ?
I cannot say for certain that whomever wrote that procedure is... (2 Replies)
Discussion started by: Browser_ice
2 Replies
7. Solaris
Hi, have few meta devices which were cleared some year ago but still appear in /dev/md/rdsk.
If I create a same meta device again, it shows old timestamp of 2009yr
I tried devfsadm -C to clear unlinked links but of no use.
What am I missing ? (2 Replies)
Discussion started by: tuxian
2 Replies
8. AIX
sorry for being a noob, i am trying to find which user accessed the server at what time and there ip address at first i used who command but the output didn't contain the ip address then i used the last command which provided me with the ip of the users but when i searched i searched and found that... (1 Reply)
Discussion started by: hercules_1010
1 Replies
LEARN ABOUT SUSE
utmpdump
UTMPDUMP(1) Linux System Administrator's Manual UTMPDUMP(1)
NAME
utmpdump - dump UTMP and WTMP files in raw format
SYNOPSIS
utmpdump [-froh] filename
DESCRIPTION
utmpdump is a simple program to dump UTMP and WTMP files in raw format, so they can be examined.
OPTIONS
-f output appended data as the file grows.
-r reverse. Write back edited login information into utmp or wtmp files.
-o use old libc5 format.
-h usage information.
utmpdump can be useful in cases of corrupted utmp or wtmp entries. It can dump out utmp/wtmp to an ASCII file, then that file can be
edited to remove bogus entries and reintegrated, using
utmpdump -r < ascii file > wtmp
but be warned as utmpdump was written for debugging purpose only.
BUGS
You may not use the option -r as the format for the utmp/wtmp files strongly depends on the input format. This tool was not written for
normal use but for debugging.
AUTHOR
Michael Krapp
SEE ALSO
last(1), w(1), who(1), utmp(5),
Februar 8, 2010 UTMPDUMP(1)