Re: WTMP file

From: John Jolet (john.jolet@FXFN.COM)
Date: Thu Apr 03 2003 - 11:52:01 EST


do you have the accounting filesets loaded? if so, there's a nifty thing
called tidysys that you can get from the bull archive that'll clean that up,
along with other things. Frankly, you only need it if you need to know who
logged in when historically. it's read by the "last" command and not a
whole lot else. Another way to control it is to turn on accounting (ibm
docs are pretty clear about this), which also gives you some interesting
information to look at in terms of who's running what command and such.
Also, if I remember correctly, you could just cat /dev/null over it (i
think).

-----Original Message-----
From: Hass, Harold [mailto:hhass@FRESNO.CA.GOV]
Sent: Thursday, April 03, 2003 10:40 AM
To: aix-l@Princeton.EDU
Subject: WTMP file

A little help please,

I have a production system where the /var/adm/wtmp file has grown huge,
about 264M, and is filling up /var. I've read the online docs about using
fwtmp to make an ascii file, editing it, and converting it back. Also read
about wftpfix command and nulladm. Being somewhat cowardly about trying new
stuff on production system, I'd like some advice.

What would be a reasonable course to take? Do I need the history contained
in the wtmp file or can I create an empty file (nulladm wtmp) without major
issues? If I have to edit the ascii version of the file, what do I edit out
or leave in? Any known gotchas?

I know the questions are pretty broad, but I would appreciate any guidance.

TIA
Harold



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:16:43 EDT