sshd line filling up wtmp file

[Sagar Sirdesai]

Hi
sshd line filling up the wtmp file and hence /var is getting full.
Please advise me how can I stop this ?

Sagar

[sangilak]

Hi,


Do not think you can disable sshd logging to the wtmp file as such.

You can however reset the file using the following command:
# cat /dev/null > /var/adm/wtmp

Also, I believe I have read somewhere in the past that if you remove the wtmp file you will need to recreate it manually (it cannot be automatically created). So if you want to get rid of the file/logging (save up some space) you could try to remove the file... Of course this would mean that unsuccessful attempts are not being logged...


Hope that helps,

sangilak

[suvy12]

May be something like logratate would help you in this situation.
For logrotate required thing is bash.
Source is also here:

http://hpux.ee.ualberta.ca/hppd/hpux/hpux/Sysadmin/logrotate-2.5/

You can use cron entry for that.