From owner-freebsd-questions Tue Jun 5 8:23:40 2001 Delivered-To: freebsd-questions@freebsd.org Received: from ren.sasknow.com (ren.sasknow.com [207.195.92.131]) by hub.freebsd.org (Postfix) with ESMTP id 47F6837B401 for ; Tue, 5 Jun 2001 08:23:37 -0700 (PDT) (envelope-from ryan@sasknow.com) Received: from localhost (ryan@localhost) by ren.sasknow.com (8.9.3/8.9.3) with ESMTP id JAA65412 for ; Tue, 5 Jun 2001 09:23:36 -0600 (CST) (envelope-from ryan@sasknow.com) Date: Tue, 5 Jun 2001 09:23:36 -0600 (CST) From: Ryan Thompson To: freebsd-questions@freebsd.org Subject: wtmp is HUGE Message-ID: Organization: SaskNow Technologies [www.sasknow.com] MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Due to an automated process running on a client's machine in the middle of the night that failed, I woke up this morning to a HUGE wtmp: 576 root@ren:/etc/mail #> last | grep "Jun 5" | wc 65220 652200 5021940 I'll worry about fixing the automated process... Can somebody tell me how to purge these entries out of wtmp (by username)? Or do I have to nuke the whole month of June to date? If there's no easier way, I thought about writing a quick C program with the structure used in utmp.h, but would there be any snags with completely rewriting /var/log/wtmp? With the help of fstat, it appears that no process keeps wtmp open all the time, so I'm assuming it's just opened on login/logout or with something like last(1). Thanks, - Ryan -- Ryan Thompson Network Administrator, Accounts SaskNow Technologies - http://www.sasknow.com #106-380 3120 8th St E - Saskatoon, SK - S7H 0W2 Tel: 306-664-3600 Fax: 306-664-1161 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message