12-13-2000
I would loke to read the WTMP file. This is a binary file in the /var/logs directory. Is there any utility which will convert this binary file to ASCII format?
9 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Here's a usefull perl script to trim the wtmp file,
in case it got too big, which happens sometimes, or got curropted (which also happens often).
You could learn from here how to parse the wtmp file...
but of course for just reading its content always simply use "last" like Neo said....
... (0 Replies)
Discussion started by: me2unix
0 Replies
2. UNIX for Dummies Questions & Answers
When I type last oracle I get dates from Nov 28, 2000 all the way back to the beginning of time it seems. The 11-28-2000 entry states that Oracle is still logged in, but if you type a who, it shows only 1 entry - the currently logged in user (Me as oracle), but I logged in only minutes ago - and... (4 Replies)
Discussion started by: cuppjr
4 Replies
3. UNIX for Dummies Questions & Answers
Hi, is it ok if i delete wtmp on HPUX 11 under /var/adm
It is filling up that filesystem
Cheers (2 Replies)
Discussion started by: dsharples
2 Replies
4. UNIX for Dummies Questions & Answers
I have AIX5.1
I have been trying to learn how to truncate the /var/adm/wtmp file.
I have seen several things on google actually but don't quite understand. I also searched your forums but couldn't find it.
one says this ">/var/adm/wtmp
Is that all I do?
I have a seperate question also. I was... (1 Reply)
Discussion started by: rocker40
1 Replies
5. Red Hat
Hi,
I am using redhat AS 3. Recently, I was asked to implement a security control on the OS: to change ownership of /var/log/wtmp to root:sys and permission to 600. However, when I made the change and reboot the machine, everything was reverted. How come? Please help.
The following is the... (1 Reply)
Discussion started by: voa2mp3
1 Replies
6. AIX
Hello everyone
I have a problem with the file wtmp that is on /var/adm
This file was not on this directory (adm).
I try creating a new file with the correct rights (644) and owner (adm:adm)
but It doesnt work.
If I type the last command i get this
last
ora10g ... (4 Replies)
Discussion started by: lo-lp-kl
4 Replies
7. AIX
Hello,
Is there a difference between the following commands besides consider the file permissions?
/usr/sbin/acct/nulladm /var/adm/wtmp
>/var/adm/wtmp
cat /dev/null >/var/adm/wtmp
Today I tried the second command and it worked... (2 Replies)
Discussion started by: x_adm
2 Replies
8. Red Hat
Hi,
Can anybody explain wtmp output fields?
A dir was created at 7:11pm and I wanted to find out who was logged in at that time but as you can see there is no ip address listed when I run utmpdump against the wtmp file.....
R,
D. (1 Reply)
Discussion started by: Duffs22
1 Replies
9. AIX
Anyone got experience where wtmp logs get truncated everyday? Though sulog, failedlogin and lastlog seems to be fine.
The server uptime is 18 days running on AIX 5.3. Sorry this seems to be a generic questions but never really encountered before. (6 Replies)
Discussion started by: depam
6 Replies
LAST(1) General Commands Manual LAST(1)
NAME
last - indicate last logins of users and teletypes
SYNOPSIS
last [ -f filename ] [ -N ] [ name ... ] [ tty ... ]
DESCRIPTION
Last will look back in the wtmp file which records all logins and logouts for information about a user, a teletype or any group of users
and teletypes. Arguments specify names of users or teletypes of interest. Names of teletypes may be given fully or abbreviated. For
example `last 0' is the same as `last tty0'. If multiple arguments are given, the information which applies to any of the arguments is
printed. For example `last root console' would list all of "root's" sessions as well as all sessions on the console terminal. Last will
print the sessions of the specified users and teletypes, most recent first, indicating the times at which the session began, the duration
of the session, and the teletype which the session took place on. If the session is still continuing or was cut short by a reboot, last so
indicates.
The pseudo-user reboot logs in at reboots of the system, thus
last reboot
will give an indication of mean time between reboot.
Last with no arguments prints a record of all logins and logouts, in reverse order. The -f filename option allows the user to examine an
alternate wtmp file. The -N option limits the report to N lines.
If last is interrupted, it indicates how far the search has progressed in wtmp. If interrupted with a quit signal (generated by a con-
trol-) last indicates how far the search has progressed so far, and the search continues.
FILES
/usr/adm/wtmp login data base
/usr/adm/shutdownlog which records shutdowns and reasons for same
SEE ALSO
wtmp(5), ac(8), lastcomm(1)
AUTHOR
Howard Katseff
4th Berkeley Distribution April 29, 1985 LAST(1)