Incorrect output from last ?

[Lor]

Good afternoon everyone,

I am not sure how to understand following "wtmp" trace.
Any help would be appreciated.

On HP-UX 11i server, "last" command reports within 10 seconds, twice the same process ID (6867) corresponding to a single tty(pts/tvc ?) but
two distinct IPs (172.16.204.112 and 172.31.1.209) ?

This causes problem to an admin script denying for a given LOGNAME multiple concurrent accesses if issued from distinct stations.

Any help would be appreciated and rewarded :-)
Thank you.

LOGIN tvc pts/tvc 6867 6 0000 0000 1056028917 Jun 19 09:21:57 2003 172.16.204.112 172.16.204.112
jlacuna tZ pts/tvc 6867 7 0000 0003 1056028927 Jun 19 09:22:07 2003 172.31.1.209 172.31.1.209

[Lor]

Thank you Jeff for your prompt reply.

Issue is faced on a 3 node rp production MC/SG cluster with over 800 concurrent users connected every day.

Patch is going to be applied first on dev server.

I will keep you updated.

Thank you again for the information.