From owner-freebsd-questions Sun Mar 4 13:40:36 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mta6.snfc21.pbi.net (mta6.snfc21.pbi.net [206.13.28.240]) by hub.freebsd.org (Postfix) with ESMTP id 013C237B719 for ; Sun, 4 Mar 2001 13:40:34 -0800 (PST) (envelope-from fscked@pacbell.net) Received: from pacbell.net ([63.204.135.137]) by mta6.snfc21.pbi.net (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9) with ESMTP id <0G9O00MO1ZOX0T@mta6.snfc21.pbi.net> for questions@FreeBSD.ORG; Sun, 4 Mar 2001 13:29:22 -0800 (PST) Date: Sun, 04 Mar 2001 13:43:14 -0800 From: richard childers Subject: Re: am i hacked??? To: Jonathan Chen Cc: Duraid , "questions@FreeBSD.ORG" Message-id: <3AA2B6F2.9B3EDF59@pacbell.net> Organization: The Free State of Dis MIME-version: 1.0 X-Mailer: Mozilla 4.73 [en] (WinNT; U) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7bit X-Accept-Language: en References: <3AA2628D.24EB90E7@home.com> <20010305090127.E83663@itouchnz.itouch> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I was wondering if perhaps certain data were embedded in the 'utmp' written to CDROM and if he might not be seeing this. (I have seen similar puzzling output after installing Solaris which was ultimately traced to this cause.) -- richard Jonathan Chen wrote: > On Sun, Mar 04, 2001 at 10:43:09AM -0500, Duraid wrote: > > my w output is not accurate and my last is showing Dec 31 while it > > begins on March 1. > > what do you think? > > > > Duraid > > Looks like your /var/run/utmp may be corrupted. You should be able to > shutdown to single user and > > # cp /dev/null /var/run/utmp > > to clear it up. The output from last depends on /var/log/wtmp, which > only gets rotated if your machine is up on month-end. > -- > Jonathan Chen > ---------------------------------------------------------------------- > Opportunities are seldom labeled > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message -- Richard A. Childers Senor UNIX Administrator fscked@pacbell.net (email) 203.556.8471 (voice/msgs) # Providing administrative expertise (not 'damage control') since 1986. # PGP fingerprint: 7EFF 164A E878 7B04 8E9F 32B6 72C2 D8A2 582C 4AFA To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message