Sponsored Content
Top Forums UNIX for Advanced & Expert Users Getting information from the wtmpx file Post 303035442 by anaigini45 on Friday 24th of May 2019 06:22:08 AM
Old 05-24-2019
Getting information from the wtmpx file

Hi,

I tried running the command "last" in the server to check the users that were last logged into the system.
However, I get this error :

Code:
root@csidblog:[/]# last
/var/adm/wtmpx: Value too large for defined data type

How do I proceed to get this info?
I read some forums suggesting to use the fwtmp tool, however, I/my company does not have official login to the Oracle website to download the package.

It is quite important.
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

wtmpx

Platform sol 8 I had wtmpx growing very large(1.2 G). I copied the file and compressed it the did a "cat /dev/null > /var/adm/wtmpx" to zero out the file and not close any doors to any processes. (After searching this seemed like the right method) This is a box that gets accessed from other... (5 Replies)
Discussion started by: finster
5 Replies

2. UNIX for Advanced & Expert Users

how to delete entry in file "wtmpx"(/var/adm/wtmpx)

Do someone know how to delete entry(some lines) in file "wtmpx" that command "last" use it. this file is binary so I cannot edit directy. ========================= #last root pts/1 noc Fri Mar 3 22:04 still logged in root pts/1 noc Fri Mar 3 22:01 - 22:02 ... (4 Replies)
Discussion started by: arm_naja
4 Replies

3. UNIX for Dummies Questions & Answers

wtmpx file

Hello everybody: the wtmpx file on my Sol8 machine, got so big (2GB), that my root partition is almost full now, can I empty that file, I read about it that it contains database of user access and auditing, so in case I emptied it will it affect my system?? Thanks alot (3 Replies)
Discussion started by: aladdin
3 Replies

4. Solaris

wtmpx file is too big

Hi, I am using Sun Solaris 5.9 OS. I have found a file called wtmpx having a size of 5.0 GB. I want to clear this file using :>/var/adm/wtmpx. My query is, would it cause any problem to the running live system. Could anyone suggest the best method to clear the file without causing problem to... (6 Replies)
Discussion started by: Vijayakumarpc
6 Replies

5. UNIX for Advanced & Expert Users

wtmpx file is not updating

Hi in my solaris 9 system wmptx file is not updating so it is not recording any login or logout or any other entry. can any one tell me how to solve this problem (0 Replies)
Discussion started by: aaysa123
0 Replies

6. Solaris

wtmpx file

What could possibly happen if wtmpx file got deleted by mistake? Thanks, (8 Replies)
Discussion started by: Pouchie1
8 Replies

7. Solaris

WTMPX File corrupted

Hi All I work on solaris 8, 9 and 10 platforms and have encountered an error which is my wtmpx files appear to be corrupted as all entries contain the date 1970 (the birth of unix). Now this is obviously not the case, so my query is: 1 - Can the existing wtmpx files be manipulated to... (6 Replies)
Discussion started by: drestarr96
6 Replies

8. UNIX for Advanced & Expert Users

Not logging ftp connections in /var/adm/wtmpx file (in last command output)

Hi all, I have F5 load balancer on my system and checking service status by opening an ftp session in every 30 seconds. These ftp sessions are being logged in /var/adm/wtmpx and filling up the file. when i run the last command most of the output is this ftp session. I was wondering if there is a... (1 Reply)
Discussion started by: cepxat
1 Replies

9. Solaris

Something is removing/deleting my wtmpx file?

hi, we have a solaris 10 box that was handled by a different sysadmin before & now it is turned over to us for system administration. our concern is that if we issue the "last" command, it usually says "wtmp begins current day current month date 02:30". just like this "wtmp begins Thu Mar 7... (6 Replies)
Discussion started by: booghaw
6 Replies

10. Solaris

Wtmpx File Permissions Question

Hi all, I have been tasked to change permissions on the wtmpx file to 640. Currently the permissions are at 644. My question is will anything be affected if I change the permissions as shown? Thanks in advance. Derek (2 Replies)
Discussion started by: Derk Berk
2 Replies
WHO(1)							    BSD General Commands Manual 						    WHO(1)

NAME
who -- display who is logged in SYNOPSIS
who [-abdHlmqrstTuv] [file] who am i DESCRIPTION
The who utility displays a list of all users currently logged on, showing for each user the login name, tty name, the date and time of login, and hostname if not local. Available options: -a Same as --bdlprTtuv. -b Time of last system boot. -d Print dead processes. -H Write column headings above the regular output. -l Print system login processes. -m Only print information about the current terminal. This is the POSIX way of saying who am i. -p Print active processes spawned by init(8). -q ``Quick mode'': List only the names and the number of users currently logged on. When this option is used, all other options are ignored. -r Print the current runlevel. Supported runlevels are: d (DEATH) The system has halted. s (SINGLE_USER) The system is running in single user mode. r (RUNCOM) The system is executing /etc/rc. t (READ_TTYS) The system is processing /etc/ttys. m (MULTI_USER) The system is running in multi-user mode. T (CLEAN_TTYS) The system is in the process of stopping processes associated with terminal devices. c (CATATONIA) The system is in the process of shutting down and will not create new processes. -s List only the name, line and time fields. This is the default. -T Print a character after the user name indicating the state of the terminal line: '+' if the terminal is writable; '-' if it is not; and '?' if a bad line is encountered. -t Print last system clock change. -u Print the idle time for each user, and the associated process ID. -v When printing of more information is requested with -u, this switch can be used to also printed process termination signals, process exit status, session id for windowing and the type of the entry, see documentation of ut_type in getutxent(3). am I Returns the invoker's real user name. file By default, who gathers information from the file /var/run/utmpx. An alternative file may be specified which is usually /var/log/wtmpx (or /var/log/wtmp, or /var/log/wtmpx.[0-6] or /var/log/wtmp.[0-6] depending on site policy as wtmpx can grow quite large and daily ver- sions may or may not be kept around after compression by ac(8)). The wtmpx and wtmp file contains a record of every login, logout, crash, shutdown and date change since wtmpx and wtmp were last truncated or created. If /var/log/wtmpx or /var/log/wtmp are being used as the file, the user name may be empty or one of the special characters '|', '}' and '~'. Logouts produce an output line without any user name. For more information on the special characters, see utmp(5). FILES
/var/run/utmp /var/run/utmpx /var/log/wtmp /var/log/wtmp.[0-6] /var/log/wtmpx /var/log/wtmpx.[0-6] SEE ALSO
last(1), mesg(1), users(1), getuid(2), utmp(5), utmpx(5) STANDARDS
The who utility is expected to conform to IEEE Std 1003.2-1992 (``POSIX.2''). HISTORY
A who utility appeared in Version 6 AT&T UNIX. BSD
January 17, 2007 BSD
All times are GMT -4. The time now is 01:33 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy