topic Re: last command & wtmps in Operating System - HP-UX

last command & wtmps

CU_1 — Sat, 10 Apr 2010 08:29:46 GMT

when I run last command it gives me the error meassage:
(Invalid record size. Unable to continue ...)
so, I checked the file size and I found it 7863772, and the size of LV for /var= 6144000!!!! somthing I can't understand.

Re: last command & wtmps

Robert-Jan Goossens — Sat, 10 Apr 2010 08:40:38 GMT

Hi,

# bdf /var ---> sizes in kilobytes

# ls -l ----> sizes in bytes

Regards,
Robert-Jan

Re: last command & wtmps

Robert-Jan Goossens — Sat, 10 Apr 2010 08:49:00 GMT

Abdul,

Do you need to keep the old information in the wtmp, btmp and wtmps files?

Otherwise zero them.

# cat /dev/null > /var/adm/btmp
etc.

If you want to try to preserve previous bad login attempts, you will need to make use of the 'fwtmp' command:
# /usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/wtmp.tmp
# vi /tmp/wtmp.tmp # Clean up records
# /usr/bin/acct/fwtmp -ic < /tmp/wtmp.tmp > /var/adm/wtmp
# rm /tmp/wtmp.tmp
etc.

Regards,
Robert-Jan

Re: last command & wtmps

CU_1 — Sat, 10 Apr 2010 08:52:21 GMT

but I still have a problem with (last) command that is read successful comand from /var/adm/wtmps???

Re: last command & wtmps

Robert-Jan Goossens — Sat, 10 Apr 2010 09:02:25 GMT

also check the btmp and wtmps files.

# /usr/sbin/acct/fwtmp < /var/adm/btmp > /tmp/btmp.tmp
# vi /tmp/btmp.tmp # Clean up records
# /usr/bin/acct/fwtmp -ic < /tmp/btmp.tmp > /var/adm/btmp
# rm /tmp/btmp.tmp

# /usr/sbin/acct/fwtmp < /var/adm/wtmps > /tmp/wtmps.tmp
# vi /tmp/wtmps.tmp # Clean up records
# /usr/bin/acct/fwtmp -ic < /tmp/wtmps.tmp > /var/adm/wtmp
# rm /tmp/wtmps.tmp

Re: last command & wtmps

madhuchakkaravarthy — Sat, 10 Apr 2010 09:49:20 GMT

hi

refer to this post

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1270894862806+28353475&threadId=861310

regards
MC

Re: last command & wtmps

Benoy Daniel — Sun, 11 Apr 2010 01:31:02 GMT

Looks like your file system and LV size are not same. Verify your LV size and extend file system same as LV.

Re: last command & wtmps

Dennis Handly — Sun, 11 Apr 2010 19:05:24 GMT

>I checked the file size and I found it 7863772, and the size of LV for /var= 6144000!

There is no connection between the corruption in wtmps(4) and the size of a LV.
See the replies by Robert-Jan and MC.

>Benoy: Looks like your file system and LV size are not same.

I'm not sure why you would think that.