coredump

[Steve_3]

I am getting a Memory Fault(coredump) when I do the last command.

Thanks,
Steve

[Bruce Regittko_1]

Hi,

Most likely the file /var/adm/wtmp is corrupt. Since this is a binary file, there is not much you can do to recover it unless you have it on backup media, but you may get some useful information from it with strings(1).

Don't remove /var/adm/wtmp or last will complain. Instead, remove its contents with > /var/adm/wtmp.

--Bruce

[federico_3]

Use the /usr/sbin/acct/fwtmp command to view the information provided by the last command.
The sintax is this:

/usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/filename

Then you can use vi to edit in order to trim it and to view /tmp/filename ( the same info you can view using last )

To convert back filename to binary :
/usr/sbin/acct/fwtmp -ic < /tmp/filename > /var/adm/wtmp

Federico

[paul courry]

You might consider doing a TC and a tape dump, then giving it to HP for analysis. This should (YMMV) give a definitive answer as to the cause of the problem.