topic Re: wtmpx in Operating System - HP-UX

wtmpx

DW1234 — Thu, 10 Jun 2010 11:45:48 GMT

Attempting to trim wtmpx. Any ideas? Thanks!

Re: wtmpx

James R. Ferguson — Thu, 10 Jun 2010 11:57:02 GMT

Hi:

Define "trim". Do you want to truncate the whole file or save some portion?

Regards!

...JRF...

Re: wtmpx

singh sanjeev — Thu, 10 Jun 2010 11:59:22 GMT

this command will not effect your system, but you will loss all the information of user who logged in your server before

Re: wtmpx

DW1234 — Thu, 10 Jun 2010 12:00:42 GMT

I would like to save some portion

Re: wtmpx

James R. Ferguson — Thu, 10 Jun 2010 12:13:30 GMT

Hi (again):

To keep only some of the data you will need to do:

# /usr/sbin/acct/fwtmp < /var/adm/wtmps > /tmp/wtmps

...edit text and rebuild binary:

# /usr/sbin/acct/fwtmp -ic < /tmp/wtmps > /var/adm/wtmps

Regards!

...JRF...

Re: wtmpx

singh sanjeev — Thu, 10 Jun 2010 12:28:52 GMT

You can use below script to trim it :

Triming a log file :

#! /bin/sh
# trimlog
filesize=`cat $1|wc -l`
trim=`expr $filesize - $2`
if [ $trim -gt 0 ]
then
sed "1,$trim d" $1 > /tmp/$1
mv /tmp/$1 $1
echo $1 trimmed by $trim lines
fi

sysntax :
# trimlog oracle_listener.log 10000

Re: wtmpx

James R. Ferguson — Thu, 10 Jun 2010 12:36:20 GMT

Hi (again):

@ Singh: You can't trim the 'wtmp*' files using tools like 'sed'. They are binary files, not text files. Other than using tools that understand their structure (notably 'fwtmp') you would need to roll-you-own with something like Perl.

Regards!

...JRF...

Re: wtmpx

singh sanjeev — Thu, 10 Jun 2010 14:56:33 GMT

thanks JRF...for valuable information.

Re: wtmpx

DW1234 — Thu, 10 Jun 2010 17:29:49 GMT

Thanks Everyone! Been a great help!

Re: wtmpx

DW1234 — Thu, 10 Jun 2010 17:30:33 GMT

Thanks Everyone!

Re: wtmpx

James R. Ferguson — Thu, 10 Jun 2010 17:39:30 GMT

Hi:

> Thanks Everyone!

If you are satisfied with the answers you received, please read:

http://forums.itrc.hp.com/service/forums/publicProfile.do?userId=WW423716&forumId=1

You can find your questions with their unassigned points here:

http://forums.itrc.hp.com/service/forums/pageList.do?userId=WW423716&listType=unassigned&forumId=1

...JRF...