From owner-freebsd-current Mon Nov 24 07:47:36 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id HAA11119 for current-outgoing; Mon, 24 Nov 1997 07:47:36 -0800 (PST) (envelope-from owner-freebsd-current) Received: from Campino.Informatik.RWTH-Aachen.DE (campino.Informatik.RWTH-Aachen.DE [137.226.116.240]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id HAA11114 for ; Mon, 24 Nov 1997 07:47:31 -0800 (PST) (envelope-from kuku@gilberto.physik.RWTH-Aachen.DE) Received: from gil.physik.rwth-aachen.de (gilberto.physik.rwth-aachen.de [137.226.30.2]) by Campino.Informatik.RWTH-Aachen.DE (8.8.7/RBI-Z17) with ESMTP id QAA09025 for ; Mon, 24 Nov 1997 16:47:17 +0100 (MET) Received: (from kuku@localhost) by gil.physik.rwth-aachen.de (8.8.8/8.6.9) id QAA00464 for freebsd-current@freefall.cdrom.com; Mon, 24 Nov 1997 16:47:18 +0100 (MET) Date: Mon, 24 Nov 1997 16:47:18 +0100 (MET) From: Christoph Kukulies Message-Id: <199711241547.QAA00464@gil.physik.rwth-aachen.de> To: freebsd-current@freefall.FreeBSD.org Subject: cvt-wtmp problem Sender: owner-freebsd-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk I believe I finally found out what binary was messing up my /var/log/wtmp. 'sshd/ssh' seemed to be the culprit. But although I upgraded cvt-wtmp and converted my /var/log/wtmp I still have a clobbered entry: # cc -o cvt-wtmp /usr/src/tools/3.0-upgrade/cvt-wtmp.c # ./cvt-wtmp /var/log/wtmp File "/var/log/wtmp": 0 old and 94 new records found. # # last | head kuku ttyp0 137.226.123.45 Mon Nov 24 16:06 still logged in kuku ttyp0 137.226.123.45 Mon Nov 24 15:31 still logged in kuku ttyp0 137.226.123.45 Mon Nov 24 14:35 - 15:10 (00:35) kuku ftp 137.226.30.2 Mon Nov 24 13:56 - 13:56 (00:00) ttyp1 137.226.123.45 Mon Nov 24 13:49 still logged in kuku ttyp0 137.226.123.45 Mon Nov 24 13:44 - 14:15 (00:30) friend ttyp0 other Mon Nov 24 13:26 - 13:28 (00:01) kuku ttyp0 gilberto Mon Nov 24 11:10 - 11:24 (00:13) kuku ttyp0 gilberto Mon Nov 24 10:56 - 11:00 (00:03) kuku ttyp0 137.226.123.45 Mon Nov 24 10:50 still logged in # The 5th line above is the strange one as you can see. Any ideas? -- Chris Christoph P. U. Kukulies kuku@gil.physik.rwth-aachen.de