Obtaining PID from wtmp

[Steve Mills_1]

I am trying to extract PIDs from the the wtmp file, to marry up with the other login info.

i.e.
Using the 'last' command with '-R' gives:
'user' 'type of entry' 'originating address' 'time' etc.

However, the 'wtmp' manpage reports the structure of the file to include PIDs.

Can anyone advise how I can extract this PID information

thanks
Steve

[Rodney Hills · Accepted solution]

The "who" command can do this-

who -u /var/adm/wtmp

Will list the pid's...

-- Rod Hills

[A. Clay Stephenson]

Hi Steve:

You can use the fwtmp to convert the binary wtmp data to text. e.g. /usr/sbin/acct/fwtmp < /etc/wtmp will list the data to stdout.

Man fwtmp for details.

[Craig Rants]

who -T and who -u will both give you the PID information.

GL,
C

[Helen French]

Hi,

Try this:

# /usr/sbin/acct/fwtmp < /etc/wtmp > /tmp/wtmp

This will convert the wtmp file to text and you can read the PID from this file. See this link for more information:

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90681/B2355-90681_top.html&con=/hpux/onlinedocs/B2355-90681/00/01/113-con.html&toc=/hpux/onlinedocs/B2355-90681/00/01/113-toc.html&searchterms=fwtmp&queryid=20020219-072530

HTH,
Shiju

[Steve Mills_1]

Thanks fellas - just what I wanted.

Cheers
Steve