topic Re: Obtaining PID from wtmp in Operating System - HP-UX

Obtaining PID from wtmp

Steve Mills_1 — Tue, 19 Feb 2002 15:02:39 GMT

I am trying to extract PIDs from the the wtmp file, to marry up with the other login info.

i.e.
Using the 'last' command with '-R' gives:
'user' 'type of entry' 'originating address' 'time' etc.

However, the 'wtmp' manpage reports the structure of the file to include PIDs.

Can anyone advise how I can extract this PID information

thanks
Steve

Re: Obtaining PID from wtmp

Rodney Hills — Tue, 19 Feb 2002 15:06:02 GMT

The "who" command can do this-

who -u /var/adm/wtmp

Will list the pid's...

-- Rod Hills

Re: Obtaining PID from wtmp

A. Clay Stephenson — Tue, 19 Feb 2002 15:13:24 GMT

Hi Steve:

You can use the fwtmp to convert the binary wtmp data to text. e.g. /usr/sbin/acct/fwtmp < /etc/wtmp will list the data to stdout.

Man fwtmp for details.

Re: Obtaining PID from wtmp

Craig Rants — Tue, 19 Feb 2002 15:13:36 GMT

who -T and who -u will both give you the PID information.

GL,
C

Re: Obtaining PID from wtmp

Helen French — Tue, 19 Feb 2002 15:19:27 GMT

Hi,

Try this:

# /usr/sbin/acct/fwtmp < /etc/wtmp > /tmp/wtmp

This will convert the wtmp file to text and you can read the PID from this file. See this link for more information:

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90681/B2355-90681_top.html&con=/hpux/onlinedocs/B2355-90681/00/01/113-con.html&toc=/hpux/onlinedocs/B2355-90681/00/01/113-toc.html&searchterms=fwtmp&queryid=20020219-072530

HTH,
Shiju

Re: Obtaining PID from wtmp

Steve Mills_1 — Tue, 19 Feb 2002 15:27:27 GMT

Thanks fellas - just what I wanted.

Cheers
Steve