Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 5 Jun 2001 09:23:36 -0600 (CST)
From:      Ryan Thompson <ryan@sasknow.com>
To:        freebsd-questions@freebsd.org
Subject:   wtmp is HUGE
Message-ID:  <Pine.BSF.4.21.0106050915320.76346-100000@ren.sasknow.com>

next in thread | raw e-mail | index | archive | help

Due to an automated process running on a client's machine in the middle of
the night that failed, I woke up this morning to a HUGE wtmp:

576 root@ren:/etc/mail #> last | grep "Jun  5" | wc
   65220  652200 5021940

I'll worry about fixing the automated process... Can somebody tell me how
to purge these entries out of wtmp (by username)? Or do I have to nuke the
whole month of June to date?

If there's no easier way, I thought about writing a quick C program with
the structure used in utmp.h, but would there be any snags with completely
rewriting /var/log/wtmp? With the help of fstat, it appears that no
process keeps wtmp open all the time, so I'm assuming it's just opened on
login/logout or with something like last(1).

Thanks,
- Ryan

-- 
  Ryan Thompson <ryan@sasknow.com>
  Network Administrator, Accounts

  SaskNow Technologies - http://www.sasknow.com
  #106-380 3120 8th St E - Saskatoon, SK - S7H 0W2

        Tel: 306-664-3600   Fax: 306-664-1161   Saskatoon
  Toll-Free: 877-727-5669     (877-SASKNOW)     North America


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0106050915320.76346-100000>