last on selected files

[Felix J. Liu]

On Other UNIX systems I am using the last command comes with a -f flag that allows one to examine a saved or rotated wtmp file. I didn't find the same on my HPUX 10.20.

One way to do so would be to rename the wtmp.old back to wtmp but this will bring other complications.

Any pointers are greatly appreciated.

[Dan Am]

hi,

11.00 has this option. maybe you can get that binary.
meanwhile you might try:
/usr/sbin/acct/wtmpfix -f /

enjoy
dan

[Andre van der Laarse · Accepted solution]

Or you can try

/usr/sbin/acct/fwtmp
The layout is different, but all the information is returned quickly.