Re: history of connections

From: Jonathan Portman (Jonathan.Portman@MPRC.CO.UK)
Date: Wed Sep 24 2003 - 09:25:03 EDT


More than likely it would be a skulker script.

Check your cron by using crontab -e or -l.

Have a look for any scripts that may have been stored to do this.

As I am aware there are no Daemons that do this.

-----Original Message-----
From: AUBINEAU Cyril [mailto:caubineau@SIGMA.FR]
Sent: 24 September 2003 14:13
To: aix-l@Princeton.EDU
Subject: Re: history of connections

The /var/adm/wtmp file is deleted at 04h05 on my server.
So i only have a one day history.

Can you tell me which daemon did that ?

Cyril AUBINEAU

-----Message d'origine-----
De : Matthieu RENONCOURT - Micro Informatique
[mailto:mrenoncourt@FRAM.FR]
Envoyé : mercredi 24 septembre 2003 14:56
À : aix-l@Princeton.EDU
Objet : Re: history of connections

Hello,

Try :
last | more

----- Original Message -----
From: "AUBINEAU Cyril" <caubineau@SIGMA.FR>
Newsgroups: bit.listserv.aix-l
To: <aix-l@Princeton.EDU>
Sent: Wednesday, September 24, 2003 2:35 PM
Subject: history of connections

> Hello,
>
> I want to know which users (logins) accessed to an aix 4.3 since 2 or
more
> days....
>
> Can you help ?
>
> Best regards.
>
> Cyril AUBINEAU

***************************************************************
Disclaimer :-
This email is confidential and intended solely for the use of the
individual to whom it is addressed. Any views or opinions are solely
those of the author and do not necessarily represent those of
20:20 Logistics Ltd, Dextra Accessories Ltd,
The Discovery Store Ltd, The Mobile Phone Repair Company Ltd and
Caudwell Group.
If you are not the intended recipient, be advised that you have
received this email in error and that any use, dissemination,
forwarding, printing or copying is strictly prohibited. If you
have received this email in error please delete it from your system
and notify the sender immediately.
***************************************************************



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:14 EDT