topic Re: wtmp in Operating System - HP-UX

wtmp

Peter Lachnitt — Thu, 22 Feb 2001 08:16:43 GMT

Hello,
i have the problem that /var/adm/wtmp is too big but i can?t clear it to zero. Has someone experience with the fwtmp? Is it possible to
to read out wtmp and cut it like a tail -200 and wright it back?

Regards Peter

Re: wtmp

Michael Lee_4 — Thu, 22 Feb 2001 08:20:48 GMT

just do the following:

#>wtmp

Regards

Re: wtmp

Dan Hetzel — Thu, 22 Feb 2001 08:41:55 GMT

Hi Peter,

Zeroing the file with (as root):
cp /dev/null /var/adm/wtmp should work.

You could run /usr/sbin/acct/runacct as this will invoke 'closewtmp' before creating a new wtmp file

Dan

Re: wtmp

federico_3 — Thu, 22 Feb 2001 10:23:56 GMT

to read wtmp file do like this:

the following will convert it to ASCII file
#/usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/file
then you can either edit the file or read it.

Then you can convert it back to binary form:
##/usr/sbin/acct/fwtmp -ic < /tmp/file > /var/adm/wtmp

Bye
federico