From: MARLON BORBA (MBORBA@TRF3.GOV.BR)
Date: Thu Apr 03 2003 - 13:47:36 EST
My US$ 0.02.
Are you sure the 'logins' registered in wtmp are valid ones? There are several problems who could cause unexpected growing of that file, e.g. malfunctioning terminals, incomplete telnet connections, users who log on but don't close their connection properly etc.
Remember also that startup/shutdown and service activation are all logged into wtmp so it grows quickly.
HTH,
Marlon.
/*
Marlon Borba
Divisao de Suporte Tecnico
TRF 3a. Regiao
(11) 3311-4683 e 9692-8357
mborba@trf3.gov.br - marlonborba@acm.org
-------
Association for Computing Machinery
Member #UK42160
Internet Society
Member #1330387
*/
>>> Bill_Verzal@BCBSIL.COM 03/04/03 14:32 >>>
> wtmp is just as clean.
--------------------------------------------------------------------------------------------------------
Bill Verzal
Technical Consultant
Forbes Technical Consulting
(312) 653-3684
bill_verzal@bcbsil.com
billverzal@imcingular.com (Pager)
888-428-4025 (Pager)
MailStop: 27.202B
"Hambleton, John S." <jhamblet@NMU.EDU>
Sent by: "IBM AIX Discussion List" <aix-l@Princeton.EDU>
04/03/2003 11:03 AM
Please respond to "IBM AIX Discussion List"
To: aix-l@Princeton.EDU
cc:
Subject: Re: WTMP file
I have been just doing this:
echo " " > wtmp
which clears it out and hasn't done any harm.
It's just a log file.
--JH
At 08:39 AM 4/3/2003 -0800, you wrote:
>A little help please,
>
>I have a production system where the /var/adm/wtmp file has grown huge,
>about 264M, and is filling up /var. I've read the online docs about
using
>fwtmp to make an ascii file, editing it, and converting it back. Also
read
>about wftpfix command and nulladm. Being somewhat cowardly about trying
new
>stuff on production system, I'd like some advice.
>
>What would be a reasonable course to take? Do I need the history
contained
>in the wtmp file or can I create an empty file (nulladm wtmp) without
major
>issues? If I have to edit the ascii version of the file, what do I edit
out
>or leave in? Any known gotchas?
>
>I know the questions are pretty broad, but I would appreciate any
guidance.
>
>TIA
>Harold
+ John S. "Dilbert" Hambleton
+ Computer Scientist and Eccentric
+ Olson Library
+ Northern Michigan University
+ Marquette Michigan 49855
+
+ Phone: 906-227-2741
+ E-Mail: JHAMBLET@NMU.EDU
+
+ Ab alio expectes, alteri quod feceris.
+
**********
The information contained in this communication is confidential, private,
proprietary, or otherwise privileged and is intended only for the use of the
addressee. Unauthorized use, disclosure, distribution or copying is strictly
prohibited and may be unlawful. If you have received this communication in
error, please notify the sender immediately at (312)653-6000 in Illinois;
(972)766-6900 in Texas; or (800)835-8699 in New Mexico.
**********
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:16:43 EDT