From owner-freebsd-current  Sun Jan 12 12:04:48 1997
Return-Path: <owner-current>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id MAA17878
          for current-outgoing; Sun, 12 Jan 1997 12:04:48 -0800 (PST)
Received: from who.cdrom.com (who.cdrom.com [204.216.27.3])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id MAA17871;
          Sun, 12 Jan 1997 12:04:44 -0800 (PST)
Received: from Campino.Informatik.RWTH-Aachen.DE (campino.Informatik.RWTH-Aachen.DE [137.226.116.240])
          by who.cdrom.com (8.7.5/8.6.11) with ESMTP id MAA22832
          ; Sun, 12 Jan 1997 12:04:40 -0800 (PST)
Received: from gilberto.physik.rwth-aachen.de (gilberto.physik.rwth-aachen.de [137.226.31.2]) by Campino.Informatik.RWTH-Aachen.DE (RBI-Z-5/8.6.12)
	with ESMTP id VAA13137; Sun, 12 Jan 1997 21:05:45 +0100 (MET)
Received: (from kuku@localhost) by gilberto.physik.rwth-aachen.de (8.8.3/8.6.9) id VAA01205; Sun, 12 Jan 1997 21:03:51 +0100 (MET)
From: Christoph Kukulies <kuku@gilberto.physik.rwth-aachen.de>
Message-Id: <199701122003.VAA01205@gilberto.physik.rwth-aachen.de>
Subject: Re: a last word on last
In-Reply-To: <199701121901.LAA11130@freefall.freebsd.org> from Mike Pritchard at "Jan 12, 97 11:01:12 am"
To: mpp@freefall.freebsd.org (Mike Pritchard)
Date: Sun, 12 Jan 1997 21:03:51 +0100 (MET)
Cc: joerg_wunsch@uriah.heep.sax.de, freebsd-current@freefall.freebsd.org
Reply-To: Christoph Kukulies <kuku@gilberto.physik.rwth-aachen.de>
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-current@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> J Wunsch wrote:
> > 
> > As Christoph Kukulies wrote:
> > 
> > > But piping the last command to anything, be it 'more' or 'head'
> > > gives totally garbled output. Fields contain garbage and seem to be
> > > shifted by one postition.
> > > 
> > > Can anyone confirm this?
> > 
> > Not confirmed.  `last -10' and `last | head' produce exactly the same
> > output for me.
> 
> Didn't the wtmp file format just change recently (for longer user names?)?  
> I would suggest zeroing out wtmp and seeing what happens.

Well, I zeroed wtmp/utmp several times in the past and the problem
came back. This may because of the various changes to the wtmp/utmp thing.

Anyway, yes, it looks ok now after deleting/touching wtmp/utmp again.
Though some entries will have to accumulate still to get a better picture.

> -- 
> Mike Pritchard
> mpp@FreeBSD.org
> "Go that way.  Really fast.  If something gets in your way, turn"
> 

--Chris Christoph P. U. Kukulies kuku@gil.physik.rwth-aachen.de