From owner-freebsd-questions@FreeBSD.ORG Fri Oct 1 22:52:23 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 12C8116A4CF for ; Fri, 1 Oct 2004 22:52:23 +0000 (GMT) Received: from zeus.davez.org (dlajoie-gw.rf.ncia.net [69.24.8.214]) by mx1.FreeBSD.org (Postfix) with ESMTP id A397543D4C for ; Fri, 1 Oct 2004 22:52:22 +0000 (GMT) (envelope-from questions@zeus.davez.org) Received: from zeus.davez.org (localhost [127.0.0.1]) by zeus.davez.org (8.12.11/8.12.11) with ESMTP id i91MqLUE013898 for ; Fri, 1 Oct 2004 18:52:21 -0400 (EDT) (envelope-from questions@zeus.davez.org) Received: from localhost (questions@localhost)i91MqL6x013895 for ; Fri, 1 Oct 2004 18:52:21 -0400 (EDT) (envelope-from questions@zeus.davez.org) Date: Fri, 1 Oct 2004 18:52:21 -0400 (EDT) From: questions To: freebsd-questions@freebsd.org In-Reply-To: <1311.66.243.145.38.1096668046.squirrel@www.l-i-e.com> Message-ID: <20041001183944.W13734@zeus.davez.org> References: <20040213210413.T71247@admin1.mdc.net> <1311.66.243.145.38.1096668046.squirrel@www.l-i-e.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: Re: /var/log/wtmp always reseting to 0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Oct 2004 22:52:23 -0000 On Fri, 1 Oct 2004, Richard Lynch wrote: > man logrotate > > Probably the logs are getting rotated and old ones discarded. > > Or, possibly, you haven't realized that the old logs are in /var/log/*.# > where * matches the old log name, and # is 1 to N, for some N defined in > logrotate configuration. man logrotate does nothing = ________Snip Command Output_______ $ man logrotate No manual entry for logrotate ________End Snip_________________ Given that all wtmp.#.gz files have a 0 size would seem to indicate all the files were emptied somehow? __________Snip Command Output_____ $ cd /var/log $ ls -al wtmp* -rw-r--r-- 1 root wheel 308 Oct 1 18:34 wtmp -rw-r--r-- 1 root wheel 0 Oct 1 05:48 wtmp.0 -rw-r--r-- 1 root wheel 0 Oct 1 05:42 wtmp.1 -rw-r--r-- 1 root wheel 0 Oct 1 05:36 wtmp.2 -rw-r--r-- 1 root wheel 0 Oct 1 05:30 wtmp.3 $ _______End Snip__________________ Also the end of month accounting report sent to root shows no logins at all wound indicate the wtmp file must be resetting to 0 prior to the end of the month account process taking place? Dave