WTMP problems

[MANOJ SRIVASTAVA]

last on the wtmp gives me a core dump is there any way to get the information of the user in such cases ?

[Kofi ARTHIABAH]

have you tried

strings wtmp?

[James R. Ferguson]

Hi:

You might try 'fwtmp' (see: man 1M fwtmp) to read the file. If the file is corrupt, your only recourse may be to:

# cat /dev/null > /var/adm/wtmp

...JRF...

[federico_3]

use the /usr/sbin/acct/fwtmp command in order to read the wtmp file. The form you should use is:

/usr/sbin/acct/fwtmp < /var/adm/wtmp > /tmp/filetemp

Then you can read the informations (you would have seen with last ) in the file /tmp/filetemp.

Bye

[CHRIS_ANORUO]

If you have finished with federico's command, delete the corrupted file and use touch /var/adm/wtmp to create a new wtmp file.

[Vincente Fernandes]

Looks like your wtmp file is corrupt use fwtmp to fix it or remove the file and create with a new one.

[James R. Ferguson]

Hi:

BTW, the safe way to handle recreating the wtmp file, if necessary, is:

# cat /dev/null > /var/adm/wtmp

...JRF...