"????" user

[hpuxrox]

Ok when I log into the systems and do a "w" it is reporting a '????' users as active.

???? ttyp1 2:56pm 11 -ksh

Does anyone know what this is?

[sujit kumar singh]

hi

what does

#who -uH

say?
regards
sujit

[hpuxrox]

???? ttyp1 Feb 6 14:56 0:18 29151 10.228.245.164

[Avinash20]

The user logged in from 10.228.245.164
PID : 29151

ps -ef| grep 29151

>>> This will let you know what it the user doing.

[Dennis Handly]

Perhaps the /etc/utmp database is messed up? Does this show that "????"?
/usr/sbin/acct/fwtmp < /etc/utmps