Problem executing "last" command

[Suraj Singh_1]

Hi all,

I get the following error when i execute "last" command.

Invalid record size. Unable to continue ...

What could be the possible cause? I am unable to figure out..

[Stephen Keane]

How big is your /var/adm/wtmp
file ?

[Suraj Singh_1]

O/p of "ll /var/adm/wtmp"

-rw-rw-r-- 1 adm adm 2455620 Apr 20 17:01 /var/adm/wtmp

[Naveej.K.A]

Hi,

Try wtmpfix to fix the /var/adm/wtmp file.

If the last command still doesn't work, create a copy of wtmp file and then do a echo > /var/adm/wtmp to null the file.

Regards,
Naveej

[Suraj Singh_1]

Naveej, wtmpfix as well as trimming /var/adm/wtmp has not made the "last" command work...

Any suffestions would be appreciated..

[Henk Geurts]

hi Suraj.
just an idea :
is the file in use ?
# fuser /var/adm/wtmp

regards.

[Stephen Keane]

Thanks for the zero points.

Have you also checked /var/adm/btmp, same scenario as /var/adm/wtmp.

[Suraj Singh_1]

HI all,

I am able to get the o/p from "lastb" command, but "last" command always gives me the same error (Invalid recird size. Unable to continue...)

Rgds

[Suraj Singh_1]

And the file is not in use.
"fuser /var/adm/wtmp" does not show any o/p.

And i am running these commands as superuser.

[Devender Khatana]

Hi Suraj,

While searching for this I found this important document. Which says there may be corruption in /var/adm/btmp also which may cause last to give some error. Alltough error do not exactly match with yours but still have a look.

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000068499910

HTH,
Devender

[Suraj Singh_1]

Thanks for all your responses...

I had to truncate both "/var/adm/wtmps" & "/var/adm/btmps" files (AND NOT /var/adm/wtmp & /var/adm/btmp )...

Regards,
SUraj