- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: need full IP address from 'who -R' or 'last -R...
Operating System - HP-UX
1753510
Members
5486
Online
108795
Solutions
Forums
Categories
Company
Local Language
юдл
back
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
юдл
back
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Blogs
Information
Community
Resources
Community Language
Language
Forums
Blogs
Go to solution
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-05-2010 11:50 AM
тАО03-05-2010 11:50 AM
Re: need full IP address from 'who -R' or 'last -R'
The "pts/??" means the connection had a pseudo-TTY allocated, i.e. it was a real login. FTP connections don't need a pseudo-TTY.
"::ffff:" is an IPv6-compatible way to display an IPv4 address, so whatever program is producing the strange wtmp entries is at least minimally IPv6-capable.
If the cut-off entries appear in fwtmp output too, then the application that produced them has been upgraded to IPv6, but the code that produces the wtmp entry has not been upgraded to support the longer address strings required by IPv6. The length of the string "::ffff:10.0.76." is *exactly* the same as the maximum-length IPv4 address, i.e. "nnn.nnn.nnn.nnn". So whatever the program is, it defines a string field or buffer that is too short for its current use. This is clearly a bug.
In HP-UX 11.11, HP begun to introduce IPv6 functionality into HP-UX. The ITRC.hp.com patch database indicates the patches for 11.11 telnetd and r-commands services include some IPv6-related fixes... but there are no specific details about all the problems fixed. As it sounds like your boxes are strictly "vendor-warranty-locked", I guess they are not exactly up to date with patches either, right?
MK
"::ffff:
If the cut-off entries appear in fwtmp output too, then the application that produced them has been upgraded to IPv6, but the code that produces the wtmp entry has not been upgraded to support the longer address strings required by IPv6. The length of the string "::ffff:10.0.76." is *exactly* the same as the maximum-length IPv4 address, i.e. "nnn.nnn.nnn.nnn". So whatever the program is, it defines a string field or buffer that is too short for its current use. This is clearly a bug.
In HP-UX 11.11, HP begun to introduce IPv6 functionality into HP-UX. The ITRC.hp.com patch database indicates the patches for 11.11 telnetd and r-commands services include some IPv6-related fixes... but there are no specific details about all the problems fixed. As it sounds like your boxes are strictly "vendor-warranty-locked", I guess they are not exactly up to date with patches either, right?
MK
MK
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-05-2010 12:22 PM
тАО03-05-2010 12:22 PM
Re: need full IP address from 'who -R' or 'last -R'
Matti,
Your answer sounds like it is right on the mark. I and my fellow admins here at the office were beginning to think in the same direction. Many of the boxes that we tested from also produced the "::ffff: we saw from previous vendor and customer connections. The of these test boxes that were used as remotes, all are IPv6 aware, even if they don't specifically use IPv6.
As you guessed, the cut-off entries also appeared in the fwtmp output. Your thoughts that the HP/UX 11.11 server is not patched to current levels is also correct. The vendor is amazingly slow to patch these servers. Patching essentially amounts to a $$$ paid upgrade. And as an annoying "aside", the vendor's approach to security is laughable. Any efforts on our side to tighten it up on the server level run the risk of voiding the warranty. ...but I'm beginning to vent and I need to get back on task.
Short of stumbling across some magic solution with wtmp, I think I will need to rethink my approach and find another way of accommodating the customer's request.
Thanks again to those that have offered input to this problem!
Your answer sounds like it is right on the mark. I and my fellow admins here at the office were beginning to think in the same direction. Many of the boxes that we tested from also produced the "::ffff:
As you guessed, the cut-off entries also appeared in the fwtmp output. Your thoughts that the HP/UX 11.11 server is not patched to current levels is also correct. The vendor is amazingly slow to patch these servers. Patching essentially amounts to a $$$ paid upgrade. And as an annoying "aside", the vendor's approach to security is laughable. Any efforts on our side to tighten it up on the server level run the risk of voiding the warranty. ...but I'm beginning to vent and I need to get back on task.
Short of stumbling across some magic solution with wtmp, I think I will need to rethink my approach and find another way of accommodating the customer's request.
Thanks again to those that have offered input to this problem!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО03-05-2010 01:03 PM
тАО03-05-2010 01:03 PM
Re: need full IP address from 'who -R' or 'last -R'
The assistance from the forum members was very helpful. The provided knowledge helped me to identify that my approach was not optimal for solving the problem at hand, so I am revising my plans and will solve the problem another way.
- « Previous
-
- 1
- 2
- Next »
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.
News and Events
Support
© Copyright 2024 Hewlett Packard Enterprise Development LP