Solved

utmpx wtmpx not showing recent entries

Posted on 2002-07-08
5
274 Views
Last Modified: 2013-12-27
Have a puzzling issue here.  I have some Sol 7/8 computers that are having a problem when I issue a "last -20" command.  Some of the boxes report entries starting 6 months ago and others report nothing just "wtmp begins Mon Jun 15 06:40" (or some other date in the past).

I've looked at /var/adm/*tmpx and done a strings on them.  They are being modified with new date (mod date changes) and I can see the new logins in the file when I do a strings on them.  Any ideas?

--- Micah
0
Comment
Question by:micahman
  • 2
  • 2
5 Comments
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 100 total points
Comment Utility
The files may be corrupt.  Try blowing them away, recreating them, and rebooting.
0
 

Expert Comment

by:emrehayretci
Comment Utility
IT should be related with your audit settings. It is possible to activate them. If you are using the default settings, then the problem should be related with the file itself. It may be corrupted.

Delete it and create it with touch again.
0
 

Author Comment

by:micahman
Comment Utility
As the wtpmx and utmpx files are not test files and, from what I have read, can corrupt the OS if removed improperly, I'd rather not just delete these files randomly and hope that they come back and all is well.  Has anyone had experience with this? Anyone know where there are docs that explain this process?  I have searched Sun's and many other sites and found nothing that relates to this process.
0
 
LVL 14

Expert Comment

by:chris_calabrese
Comment Utility
It won't corrupt the OS, but it will confuse things like last and who. That's why you need to reboot afterwards to wipe the slate clean.
0
 

Author Comment

by:micahman
Comment Utility
Finally got a chance to test this out on one of the servers.  Worked like a charm.  Thanks!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

In tuning file systems on the Solaris Operating System, changing some parameters of a file system usually destroys the data on it. For instance, changing the cache segment block size in the volume of a T3 requires that you delete the existing volu…
Using libpcap/Jpcap to capture and send packets on Solaris version (10/11) Library used: 1.      Libpcap (http://www.tcpdump.org) Version 1.2 2.      Jpcap(http://netresearch.ics.uci.edu/kfujii/Jpcap/doc/index.html) Version 0.6 Prerequisite: 1.      GCC …
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now