Urgent problem with wtmpx


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers Urgent problem with wtmpx
# 1  
Old 03-28-2003
Data Urgent problem with wtmpx

Hi everybody I have a problem with wtmpx. Accounting file. I activated it. It works but to well Smilie Writes the same message every minute. "faxmodem" As you can see it does not take to long until my /var file is soon full.


Thanks

Peter
# 2  
Old 03-30-2003
Which process (application) is writing the faxmodem message? Are you using fax modem software (sorry, seems like a dump question).? Which fax modem software are you using? Do you have the source code?
# 3  
Old 03-31-2003
Hi Neo,

It's hard to explain, something is write it I stopped my fax software along time ago. I was using a free ware "Hylfax" before. I stopped it and when I use a grep I can't find anything using the faxmodem.

My fax solution is a special snna software that send my faxs as a file to a windows fax box. It has nothing to do with the faxmodem. I just don't have any ideas Smilie Even search in google didn't bring anything...

Peter
# 4  
Old 03-31-2003
Would you be willing to post the output of your ps -ef or ps -aux command?
# 5  
Old 03-31-2003
Sorry it alittle long, but this is product machine...

Thanks again nero for the support....

Peter
Code:
     UID   PID  PPID  C    STIME TTY      TIME CMD
    root     0     0  0   Mar 15 ?        0:01 sched
    root     1     0  1   Mar 15 ?       140:07 /etc/init -
    root     2     0  0   Mar 15 ?        0:01 pageout
    root     3     0  2   Mar 15 ?       574:48 fsflush
    root   828     1  0   Mar 15 ?        0:00 /usr/lib/saf/sac -t 300
  daemon   204     1  0   Mar 15 ?        0:00 /usr/lib/nfs/statd
    root   206     1  0   Mar 15 ?        0:00 /usr/lib/autofs/automountd
    root    52     1  0   Mar 15 ?        0:00 /usr/lib/sysevent/syseventd
    root    54     1  0   Mar 15 ?        0:00 /usr/lib/sysevent/syseventconfd
    root    65     1  0   Mar 15 ?        2:38 /usr/lib/picl/picld
    root    60     1  0   Mar 15 ?        0:01 devfsadmd
    root   187     1  0   Mar 15 ?        0:04 /usr/sbin/inetd -s -t
  oracle 25247     1  0 09:58:02 ?        4:39 oracleFFM (LOCAL=NO)
    root   296     1  0   Mar 15 ?        0:00 /usr/sbin/vold
    root   287     1  0   Mar 15 ?        0:00 /usr/sadm/lib/smc/bin/smcboot
    root   288   287  0   Mar 15 ?        0:00 /usr/sadm/lib/smc/bin/smcboot
    root   280     1  0   Mar 15 ?        0:03 /usr/lib/utmpd
    root   163     1  0   Mar 15 ?        0:00 /usr/sbin/rpcbind
    root   217     1  0   Mar 15 ?        0:27 /usr/sbin/syslogd
    root   236     1  0   Mar 15 ?        1:04 /usr/sbin/nscd
    root   202     1  0   Mar 15 ?        0:00 /usr/lib/nfs/lockd
phodders 28484     1  0 13:14:12 ??       0:00 /usr/dt/bin/dtterm -sb -sl 5000 -display 172.18.17.25:0.0 -title FRA006
    root   259     1  0   Mar 15 ?        0:18 /usr/lib/lpsched
    root   272     1  0   Mar 15 ?        0:00 /usr/lib/power/powerd
    root   221     1  0   Mar 15 ?        1:35 /usr/sbin/cron
    root   302     1  0   Mar 15 ?        0:00 /usr/lib/sendmail -bd -q15m
    root  4358  3703  0   Mar 19 pts/4    0:00 ksh -o vi
    root   825     1  0   Mar 15 ?        3:34 /usr/local/samba/bin/nmbd -D
    root   434     1  0   Mar 15 ?        0:00 /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf
  oracle  3303     1  0   Mar 28 ?        0:01 ora_smon_TEST
    root 19517  3508  0   Mar 25 pts/6    0:00 ksh -o vi
  oracle   583     1  0   Mar 28 ?        0:00 ora_pmon_ESAB
  daemon   378   377  0   Mar 15 ?        0:00 /usr/lib/ab2/dweb/sunos5/bin/dwhttpd /usr/lib/ab2/dweb/data
    root   391     1  0   Mar 15 ?        1:24 /usr/local/bin/prngd /var/spool/prngd/pool
  daemon   377     1  0   Mar 15 ?        0:00 /usr/lib/ab2/dweb/sunos5/bin/dwhttpd /usr/lib/ab2/dweb/data
    root   856   828  0   Mar 15 ?        0:00 /usr/lib/saf/ttymon
   hoell 18990     1  0 08:38:28 ?        0:00 ADSAMP -b -s ITREXSLDN41
    root   411     1  0   Mar 15 ?        0:00 /usr/local/sbin/sshd
    root   452     1  0   Mar 15 ?        0:00 /usr/lib/dmi/dmispd
    root   829     1  0   Mar 15 console  0:00 /usr/lib/saf/ttymon -g -h -p fra006 console login:  -T sun -d /dev/console -l c
  bbuser   572     1  0   Mar 15 ?        0:12 /bin/sh /export/home/bb18c1/bin/bbrun /export/home/bb18c1/bin/bb-local.sh
    root   495     1  0   Mar 15 ?       10:51 ./ccsisdn
    root   477     1  0   Mar 15 ?        0:00 /usr/lib/dmi/snmpXdmid -s fra006
    root   448     1  0   Mar 15 ?        0:45 /usr/dt/bin/dtlogin -daemon
 merkeld  3492     1  0   Mar 24 ??       0:03 /usr/dt/bin/dtterm -sb -sl 5000 -display 172.18.16.221:0.0 -title FRA006
  bbuser   607     1  0   Mar 15 ?        0:13 /bin/sh /export/home/bb18c1/bin/bbrun /export/home/bb18c1/ext/bb-swap.sh
    root   810   434  0   Mar 15 ?        0:39 mibiisa -r -p 32794
    root  4017  2683  0   Mar 27 pts/2    0:00 ksh -o vi
    root   794     1  0   Mar 15 ?        0:03 /usr/local/samba/bin/smbd -D
  oracle  7379     1  0   Mar 29 ?        0:01 ora_smon_POOL
    root 10239 10947  0   Mar 24 pts/10   0:00 ksh -o vi
   hoell 20086 20084  0 10:17:54 pts/8    0:01 -ksh
    root 10206 17804  0   Mar 24 pts/12   0:00 rlogin fra006-test -l root
  oracle  3301     1  0   Mar 28 ?        0:27 ora_ckpt_TEST
   hoell  5252  5250  0 12:22:20 pts/7    0:00 -ksh
phodders  2681     1  0   Mar 27 ??       0:05 /usr/dt/bin/dtterm -sb -sl 5000 -display 172.18.17.25:0.0 -title FRA006
  oracle   593     1  0   Mar 28 ?        0:00 ora_reco_ESAB
  oracle  7467     1  0   Mar 29 ?        0:01 ora_smon_LDN
phodders  2683  2681  0   Mar 27 pts/2    0:00 /bin/csh
  bbuser 15593   572  0 13:10:02 ?        0:00 sleep 298
    root 28495 28486  0 13:14:16 pts/3    0:00 ksh -o vi
    root  6522   187  0 10:23:28 ?        0:00 in.ftpd
  oracle   589     1  0   Mar 28 ?        0:00 ora_ckpt_ESAB
   hoell 18987     1  0 08:38:14 ?        0:00 ADSAMP -b -s ITREXSFFM41
  oracle  7377     1  0   Mar 29 ?        0:13 ora_ckpt_POOL
  oracle  7463     1  0   Mar 29 ?        0:01 ora_lgwr_LDN
  oracle  7465     1  0   Mar 29 ?        0:19 ora_ckpt_LDN
steppkej 11375  5452  0 12:35:23 pts/9    0:00 IWP5
  oracle  7429     1  0   Mar 29 ?        0:00 ora_reco_FFM
 merkeld  3506     1  0   Mar 24 ??       0:13 /usr/dt/bin/dtterm -sb -sl 5000 -display 172.18.16.221:0.0 -title FRA006
  oracle  7373     1  0   Mar 29 ?        0:00 ora_dbw0_POOL
phodders 17442 17440  0   Mar 27 pts/1    0:00 /bin/csh
  oracle  7469     1  0   Mar 29 ?        0:00 ora_reco_LDN
 merkeld 10947  3506  0   Mar 24 pts/10   0:00 /bin/csh
   hoell 23064 20086  0 13:01:17 pts/8    0:00 vi backup-wpdaten
  oracle   587     1  0   Mar 28 ?        0:00 ora_lgwr_ESAB
  oracle 19404     1  0 09:55:58 ?        0:00 oracleLDN (LOCAL=NO)
  oracle  7439     1  0   Mar 29 ?        0:00 /u01/oracle/product/817/bin/tnslsnr LISTENER -inherit
  oracle  3297     1  0   Mar 28 ?        0:00 ora_dbw0_TEST
  oracle  7421     1  0   Mar 29 ?        0:01 ora_dbw0_FFM
  bbuser 15823   607  0 13:10:03 ?        0:00 sleep 300
 merkeld  3494  3492  0   Mar 24 pts/5    0:00 /bin/csh
  oracle  7419     1  0   Mar 29 ?        0:00 ora_pmon_FFM
phodders 17440     1  0   Mar 27 ??       0:03 /usr/dt/bin/dtterm -sb -sl 5000 -display 172.18.17.25:0.0 -title FRA006
  oracle  7381     1  0   Mar 29 ?        0:00 ora_reco_POOL
    root  8988   794  0 13:07:08 ?        0:00 /usr/local/samba/bin/smbd -D
  oracle 12231     1  0 10:25:33 ?        2:36 oracleLDN (LOCAL=NO)
    root  3701   187  0   Mar 19 ?        0:00 in.rlogind
  oracle  7461     1  0   Mar 29 ?        0:01 ora_dbw0_LDN
    root  3703  3701  0   Mar 19 pts/4    0:00 ksh -o vi
    root 28505 28495  0 13:14:34 pts/3    0:00 ps -ef
    root 21947 21940  0 09:12:52 pts/11   0:00 ksh -o vi
  oracle  3305     1  0   Mar 28 ?        0:00 ora_reco_TEST
  oracle  7423     1  0   Mar 29 ?        0:04 ora_lgwr_FFM
  oracle  7425     1  0   Mar 29 ?        0:13 ora_ckpt_FFM
    root 11090  4358  0   Mar 19 pts/4    0:00 ksh
  oracle 22852     1  0 12:50:50 ?        0:00 oracleFFM (LOCAL=NO)
phodders 28486 28484  0 13:14:12 pts/3    0:00 /bin/csh
   hoell   997 18990  0                   0:01 <defunct>
    root 17802   187  0   Mar 19 ?        0:00 in.rlogind
    root 17804 17802  0   Mar 19 pts/12   0:00 ksh -o vi
  oracle 19402     1  0 09:55:57 ?        0:00 oracleLDN (LOCAL=NO)
    root 17449 17442  0   Mar 27 pts/1    0:00 ksh -o vi
  oracle   591     1  0   Mar 28 ?        0:00 ora_smon_ESAB
   hoell  2826   221  0 08:00:00 ?        0:00 sh -c /usr/iwp5/bin/watch.pl 1>/usr/iwp5/bin/watch.log  2>&1
  oracle 16424     1  0 09:54:55 ?        0:02 oracleLDN (LOCAL=NO)
  oracle   948     1  0 11:37:30 ?        0:01 oraclePOOL (LOCAL=NO)
  oracle 12229     1  0 10:25:33 ?        0:00 oracleLDN (LOCAL=NO)
  oracle  3299     1  0   Mar 28 ?        0:00 ora_lgwr_TEST
    root 10207 10206  0   Mar 24 pts/12   0:00 rlogin fra006-test -l root
   hoell 12117 18990  0 10:25:10 ?        1:49 ADSAMP -b -s ITREXSLDN41
    root  3548  3494  0   Mar 24 pts/5    0:00 ksh -o vi
  oracle  7427     1  0   Mar 29 ?        0:01 ora_smon_FFM
phodders 21940  2681  0 09:12:42 pts/11   0:00 /bin/csh
  oracle 25155     1  0 09:58:01 ?        0:00 oracleFFM (LOCAL=NO)
  oracle  7375     1  0   Mar 29 ?        0:00 ora_lgwr_POOL
   hoell 24710 18987  0 09:57:45 ?        3:08 ADSAMP -b -s ITREXSFFM41
    root 20084   187  0 10:17:54 ?        0:00 in.telnetd
  oracle   585     1  0   Mar 28 ?        0:00 ora_dbw0_ESAB
 ccsuser  5547   794  0   Mar 27 ?        6:38 /usr/local/samba/bin/smbd -D
   hoell 22170 18990  0                   0:00 <defunct>
   hoell  2828  2826  0 08:00:00 ?        0:00 /usr/bin/perl -w /usr/iwp5/bin/watch.pl
   hoell 19398 18990  0 09:55:42 ?        0:00 ADSAMP -b -s ITREXSLDN41
  oracle 22850     1  0 12:50:50 ?        0:00 oracleFFM (LOCAL=NO)
 merkeld  3508  3506  0   Mar 24 pts/6    0:00 /bin/csh
  oracle 26218     1  0 12:08:42 ?        0:02 oracleFFM (LOCAL=NO)
steppkej  5452  5450  0 12:33:14 pts/9    0:00 /usr/bin/ksh menue
    root  6525   187  0 10:23:29 ?        0:00 in.ftpd
    root  5450   187  0 12:33:14 ?        0:00 in.rlogind
  oracle  7371     1  0   Mar 29 ?        0:00 ora_pmon_POOL
  oracle  7459     1  0   Mar 29 ?        0:00 ora_pmon_LDN
   hoell 20376 18987  0 12:50:02 ?        0:00 ADSAMP -b -s ITREXSFFM41
  oracle  3295     1  0   Mar 28 ?        0:00 ora_pmon_TEST
  oracle 28492     1  0 13:14:12 ?        0:00 oracleFFM (LOCAL=NO)
    root  5250   187  0 12:22:19 ?        0:00 in.telnetd
  oracle 28238     1  0 12:42:00 ?        0:00 oracleFFM (LOCAL=NO)8

# 6  
Old 03-31-2003
One other request, just to be sure, can you post the output of crontab -l (for root) so we can see if any cron jobs are running every minute that might effect this and not (easily) show up in the process table.

BTW, I edited your post and wrapped you output the the \[code\] directive to make it easier to read.
# 7  
Old 04-01-2003
So here is my crontab. But I don't have anything running every minute that has some thing to do with a faxmodem..

Thanks again

Code:
#ident  "@(#)root       1.19    98/07/06 SMI"   /* SVr4.0 1.1.3.1       */
#
# The root crontab should be used to perform accounting data collection.
#
# The rtc command is run to adjust the real time clock if and when
# daylight savings time changes.
#
* * * * 1-5  /usr/local/bin/dwz_call.sh         1> /tmp/call1.log 2>&1
* * * * 1-5 sh -c "/usr/users/sysmgr/bin/select_swift.sh"       > /dev/null
* * * * 1-5 csh -c "/usr/users/sysmgr/bin/sebfile_call.sh" 1>/tmp/call.log 2>&1
* * * * 1-5 csh -c "/usr/users/sysmgr/bin/more_call.sh"         > /dev/null
05 1 * * 2-6 ksh -c "/usr/users/sysmgr/bin/backup_disk.sh"              >/dev/nu
ll
00 23 31 * * csh -c "/usr/users/sysmgr/bin/eom_new.sh"  1>/tmp/eom.log 2>&1
10 3 * * 0,4 /etc/cron.d/logchecker
10 3 * * 0   /usr/lib/newsyslog
15 3 * * 0 /usr/lib/fs/nfs/nfsfind
01 2 * * * [ -x /usr/sbin/rtc ] && /usr/sbin/rtc -c > /dev/null 2>&1
30 3 * * * [ -x /usr/lib/gss/gsscred_clean ] && /usr/lib/gss/gsscred_clean
#00 6 * * 3 csh -c "/usr/users/sysmgr/bin/clean_up.sh"  >> /tmp/clean_up.log
30 6 * * 1-5 sh -c "/usr/local/bin/spoolfileF"          > /dev/null
32 6 * * 1-5 sh -c "/usr/local/bin/spoolfileL"          > /dev/null
34 6 * * 1-5 sh -c "/usr/local/bin/spoolfileE"          > /dev/null
00 8,16 * * 1-5 ksh -c "/usr/local/bin/wertpapierkurse.sh" > /dev/null
08 20 * * 1-5 csh -c "/usr/local/bin/wmdaten.sh"                > /dev/null
00 16 * * 1-5 sh -c "/usr/users/sysmgr/bin/check_settlement.sh" > /dev/null
00 17 * * 1-5 sh -c "/usr/iwp5/bin/dwz_kontrolle1.sh"           > /dev/null
30 17 * * * sh -c "/usr/local/bin/last_hoell.sh"                > /dev/null
00 18 * * 1-5 sh -c "/usr/local/bin/dwzreport.sh"               > /dev/null
01 21 * * 1-5 sh -c "/usr/users/sysmgr/bin/copy_kurse.sh"       > /dev/null
# 45 21 * * 1-5 sh -c "/usr/users/sysmgr/bin/check_xetra.sh"    > /dev/null
45 21 * * 1-5 sh -c "/usr/users/sysmgr/bin/check_ngt.sh"        > /dev/null
00 22 * * * sh -c "/usr/local/bin/wtmpx.sh"               > /dev/null
#00 9,10,12,14,16,18,20,22 * * 1-5 ksh -c "/usr/local/bin/fax_log_save.sh"     >
 /dev/null
#00,10,20,30,40,50 10-21 * * 1-5 ksh -c "/usr/local/sbin/faxmodem ttyb"        >
/dev/null 2>&1
30 23 * * 1-5 sh -c "/usr/users/sysmgr/bin/copy_gii.sh" > /usr/iwp5/bin/copy_gii
.log
#
# Eingefuegt am 06.08.02 KL
#
#00 04 * * 1-5 /usr/iwp5/bin/datacheck.sh
#00 05 * * 1-6 /usr/iwp5/bin/rebuild.sh 1>/usr/iwp5/bin/rebuild.cronlog 2>&1
# A. Stumpf, cubes GmbH, 4.11.02 Faxsoftware cleanup
50 4 * * * /usr/ccs_user/clean

 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Getting information from the wtmpx file

Hi, I tried running the command "last" in the server to check the users that were last logged into the system. However, I get this error : root@csidblog:# last /var/adm/wtmpx: Value too large for defined data type How do I proceed to get this info? I read some forums suggesting to use... (2 Replies)
Discussion started by: anaigini45
2 Replies

2. Solaris

wtmpx corrupted ? fix ...

Hi, saw couple threads about wtmpx corruption, I had this problem on many servers, last command was not working or displaying old output, found good information on a thread on this site and wrote a perl script to fix, thought it might help some people. I found that using wtmpfix I lost many... (0 Replies)
Discussion started by: yannm
0 Replies

3. Solaris

WTMPX File corrupted

Hi All I work on solaris 8, 9 and 10 platforms and have encountered an error which is my wtmpx files appear to be corrupted as all entries contain the date 1970 (the birth of unix). Now this is obviously not the case, so my query is: 1 - Can the existing wtmpx files be manipulated to... (6 Replies)
Discussion started by: drestarr96
6 Replies

4. Solaris

wtmpx file

What could possibly happen if wtmpx file got deleted by mistake? Thanks, (8 Replies)
Discussion started by: Pouchie1
8 Replies

5. UNIX for Advanced & Expert Users

wtmpx file is not updating

Hi in my solaris 9 system wmptx file is not updating so it is not recording any login or logout or any other entry. can any one tell me how to solve this problem (0 Replies)
Discussion started by: aaysa123
0 Replies

6. Solaris

wtmpx file is too big

Hi, I am using Sun Solaris 5.9 OS. I have found a file called wtmpx having a size of 5.0 GB. I want to clear this file using :>/var/adm/wtmpx. My query is, would it cause any problem to the running live system. Could anyone suggest the best method to clear the file without causing problem to... (6 Replies)
Discussion started by: Vijayakumarpc
6 Replies

7. UNIX for Dummies Questions & Answers

wtmpx file

Hello everybody: the wtmpx file on my Sol8 machine, got so big (2GB), that my root partition is almost full now, can I empty that file, I read about it that it contains database of user access and auditing, so in case I emptied it will it affect my system?? Thanks alot (3 Replies)
Discussion started by: aladdin
3 Replies

8. UNIX for Advanced & Expert Users

how to delete entry in file "wtmpx"(/var/adm/wtmpx)

Do someone know how to delete entry(some lines) in file "wtmpx" that command "last" use it. this file is binary so I cannot edit directy. ========================= #last root pts/1 noc Fri Mar 3 22:04 still logged in root pts/1 noc Fri Mar 3 22:01 - 22:02 ... (4 Replies)
Discussion started by: arm_naja
4 Replies

9. UNIX for Dummies Questions & Answers

help urgent problem

i accedently "deleted" all workspaces I have a black screen and dont know what to do solaris common desktop enviroment (1 Reply)
Discussion started by: ssshakir
1 Replies

10. UNIX for Dummies Questions & Answers

wtmpx

Platform sol 8 I had wtmpx growing very large(1.2 G). I copied the file and compressed it the did a "cat /dev/null > /var/adm/wtmpx" to zero out the file and not close any doors to any processes. (After searching this seemed like the right method) This is a box that gets accessed from other... (5 Replies)
Discussion started by: finster
5 Replies
Login or Register to Ask a Question