wtmp grows .....

[f. halili]

Hello everyone,

I ran "last" and found these lines continously coming. I see so many lines in one minute.

It's so fast that wtmp keeps on growing. Any ideas?

root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in
root remshd Thu Apr 21 18:49 still logged in


Thanks,
f. halili

[RAC_1 · Accepted solution]

fuser -u /var/adm/wtmp

What is using it so much?? You can null it out. Also check if anybody is using the system or not.

who -u
finger

Anil

[Pete Randall]

> /var/adm/wtmp


Pete

[Henk Geurts]

hi f
do you need remsh ?
might want to reconsider ...
it opens up your system..and creating uncontrolled behaviour...as in this case..
we dont allow remsh,rlogin or rexec on all our servers....

regards.

[f. halili]

thanks !!