Reboots not showing up in wtmp

[Jeff_Traigle]

Anyone familiar with circumstances where reboots are not registered to wtmp so they can't be listed with "who -b" or "last reboot"? The reboot does get logged to /etc/shutdownlog and /var/adm/syslog/syslog.log appears to indicate shutdown was done gracefully with shutdown (various services show being killed with signal 15).

[Robert-Jan Goossens]

Hi Jeff,

Maybe a corrupt wtmp file

Document description: Why does the last(1M) command core dump?
Document id: HPUXKBRC00000376

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000072678626

Regards,
Robert-Jan

[Jeff_Traigle]

Well, not getting any core dumps from running last. Other user logins are registered in wtmp just fine. I would think if wtmp was corrupt, it wouldn't be just reboots not showing up.

[Cheryl Griffin]

what os?
PHCO_25796 s700_800 11.00 cumulative patch for /sbin/init

[Jeff_Traigle]

Just my luck... I think to put in the OS revision and then don't do it. Doh! It's HP-UX 11.11.