topic wtmps in Operating System - HP-UX

wtmps

Joe415 — Thu, 27 Dec 2007 19:06:06 GMT

Hi all

The wtmps file on 1 of our servers is very large (11.23). Is there a way of decreasing the size of this file?

Thanks
Joe

Re: wtmps

Pete Randall — Thu, 27 Dec 2007 19:08:54 GMT

Try "> /var/adm/wtmp".

Pete

Re: wtmps

David Bellamy — Thu, 27 Dec 2007 21:16:58 GMT

Joe do a man on fwtmp, hope this helps

Re: wtmps

James R. Ferguson — Thu, 27 Dec 2007 21:56:31 GMT

Hi:

The 'wtmps' file is a binary file and hence cannot be directly editted. This leaves you two choices:

(1) completely truncate the file:

# cat /dev/null > /var/adm/wtmps

or (2), convert the binary file to an Ascii one; edit the Ascii copy to remove all but the most recent contents; and convert the editted file from Ascii to binary:

# /usr/sbin/acct/fwtmp < /var/adm/wtmp > /var/tmp/wtmp
# vi /var/tmp/wtmp
# /usr/sbin/acct/fwtmp -ic < /var/tmp/wtmp > /var/adm/wtmp

Regards!

...JRF...

Re: wtmps

radkol — Fri, 28 Dec 2007 19:55:40 GMT

Hi,
I'd suggest you first to check what's the reason for such a big wtmpx file.
You should be able to see more information about this with
/usr/sbin/acct/fwtmp

Usually it's caused by scripts started from inittab, when the script start and stop it's logged in wtpmx. So if you have scripts which exits you will have very fast growing wtmpx.