From owner-freebsd-questions  Mon Apr 17 19:34:20 1995
Return-Path: questions-owner
Received: (from majordom@localhost)
          by freefall.cdrom.com (8.6.10/8.6.6) id TAA10769
          for questions-outgoing; Mon, 17 Apr 1995 19:34:20 -0700
Received: from localhost (localhost [127.0.0.1])
          by freefall.cdrom.com (8.6.10/8.6.6) with SMTP id TAA10761
          ; Mon, 17 Apr 1995 19:34:15 -0700
X-Authentication-Warning: freefall.cdrom.com: Host localhost didn't use HELO protocol
To: "Rashid Karimov." <rashid@haven.ios.com>
Cc: questions@FreeBSD.org
Subject: Re: Huuuge discrepancy between "last" and "who" 
In-reply-to: Your message of "Mon, 17 Apr 95 22:24:34 EDT."
             <199504180224.WAA26508@haven.ios.com> 
Date: Mon, 17 Apr 1995 19:34:14 -0700
Message-ID: <10759.798172454@freefall.cdrom.com>
From: "Jordan K. Hubbard" <jkh@freefall.cdrom.com>
Sender: questions-owner@FreeBSD.org
Precedence: bulk

1.  Don't cc both -hackers and -questions.  One or the other, please! :-)

2.  Don't run the 0210 bins and -current kernel together.  It doesn't work
    very well.  A number of kernel structures have changed and the utilities
    must be compiled to match it.  I recommend doing a `make World' from
    -current.


> 		Hi there folx,
> 
> 
> 		I run a server ( P90/PCI/etc ) under binaries from
> 		SNAP 0210 and almost -current kernel .
> 		I posted a Q here , conserning very high amount
> 		of telnetds running in the system ( out of pty's
> 		finally ) few days ago and now I have other interesting
> 		problem :
> 
> 		if I run "last" - I c some 50-54 users being logged in,
> 		while "who" reports only 25-30 of them ...
> 		Is this normal ( I doubt it :) ?
> 
> 		It was intersting , since system showed load average
> 		at 3-5% with reportedly only 30 online users , so 
> 		finally after running "ps -axj" I was able to find
> 		a LOT of processes belonging to users , which were
> 		not logged in , accordingly to "who".
> 		Since the processes had rather decent run time , 
> 		obviously there were not frozen or zombie or whatever.
> 		And "last" output shows that thir owners were actually
> 		logged in ....
> 
> 
> 		=-=-=-= Extra Q ( 2 for the price of 1 ) :
> 
> 		sometimes when I start "finger [user]" , the system
> 		spends some 40-60 secs till I get the result.
> 		And I can see _huuge HDD load on the system.
> 		Sometimes it works out in few seconds .
> 		The wtmp file size is about 1Mb ( will rotate it ).
> 		The passwd file has about 1800 entries.
> 
> 
> 	Rashid.