From owner-freebsd-current Wed Nov 26 03:10:49 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id DAA08786 for current-outgoing; Wed, 26 Nov 1997 03:10:49 -0800 (PST) (envelope-from owner-freebsd-current) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id DAA08775 for ; Wed, 26 Nov 1997 03:10:43 -0800 (PST) (envelope-from j@uriah.heep.sax.de) Received: (from uucp@localhost) by sax.sax.de (8.8.8/8.8.8) with UUCP id MAA21445; Wed, 26 Nov 1997 12:10:07 +0100 (CET) (envelope-from j@uriah.heep.sax.de) Received: (from j@localhost) by uriah.heep.sax.de (8.8.8/8.8.5) id LAA15666; Wed, 26 Nov 1997 11:40:47 +0100 (MET) Message-ID: <19971126114047.15993@uriah.heep.sax.de> Date: Wed, 26 Nov 1997 11:40:47 +0100 From: J Wunsch To: freebsd-current@freefall.FreeBSD.org Cc: Christoph Kukulies Subject: Re: cvt-wtmp problem Reply-To: Joerg Wunsch References: <199711241547.QAA00464@gil.physik.rwth-aachen.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.88 In-Reply-To: <199711241547.QAA00464@gil.physik.rwth-aachen.de>; from Christoph Kukulies on Mon, Nov 24, 1997 at 04:47:18PM +0100 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Sender: owner-freebsd-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk As Christoph Kukulies wrote: > # cc -o cvt-wtmp /usr/src/tools/3.0-upgrade/cvt-wtmp.c > # ./cvt-wtmp /var/log/wtmp > File "/var/log/wtmp": 0 old and 94 new records found. > # > # last | head > kuku ttyp0 137.226.123.45 Mon Nov 24 16:06 still logged in > kuku ttyp0 137.226.123.45 Mon Nov 24 15:31 still logged in > kuku ttyp0 137.226.123.45 Mon Nov 24 14:35 - 15:10 (00:35) > kuku ftp 137.226.30.2 Mon Nov 24 13:56 - 13:56 (00:00) > ttyp1 > 137.226.123.45 Mon Nov 24 13:49 still logged in > The 5th line above is the strange one as you can see. > Any ideas? cvt-wtmp does extensive guesswork, but there's no guarantee that it will catch all cases. You could try to fixup the wtmp file in question with something like bpatch, in order to help the guesswork out. -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)