topic Re: Error in last -R command in Operating System - HP-UX

Error in last -R command

vaman — Mon, 18 Oct 2004 12:37:35 GMT

I am working on hpux 11.0,
I am getting error Memory fault (coredump)
after giving command last -R username,
but it shows o/p correctly, last line it gives the error.

Re: Error in last -R command

Mark Greene_1 — Mon, 18 Oct 2004 12:39:44 GMT

Either your wtmp or your utmp files are corrupt. cp /dev/null to them and touch them, make sure the permissions and ownership are the same as before.

mark

Re: Error in last -R command

Prashant Zanwar_4 — Mon, 18 Oct 2004 12:40:10 GMT

what does the what core says.

Thanks
Prashant

Re: Error in last -R command

Steven E. Protter — Mon, 18 Oct 2004 12:43:36 GMT

strings /var/adm/wtmp

You'll probably get nothing. Probably due to corruption.

> /var/adm/wtmp

This will start you fresh though it won't help get any data.

Note that cleaning or corrupting the /var/adm/wtmp and /var/adm/btmp files are one of the ways hacker's cover their tracks.

You may have a security situation on your hands and wish to act accordingly.

SEP