From owner-freebsd-current Sat Jan 11 09:28:16 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id JAA24891 for current-outgoing; Sat, 11 Jan 1997 09:28:16 -0800 (PST) Received: from freeside.fc.net (reclaimed.agis.net [204.157.153.2]) by freefall.freebsd.org (8.8.4/8.8.4) with SMTP id JAA24886 for ; Sat, 11 Jan 1997 09:28:13 -0800 (PST) Received: from rider.fc.net (rider.fc.net [206.224.74.198]) by freeside.fc.net (8.6.12/8.6.6) with ESMTP id LAA03244; Sat, 11 Jan 1997 11:25:53 -0600 Received: from papillon.lemis.de ([192.109.197.159]) by rider.fc.net (8.7.5/8.7.3) with ESMTP id LAA04955; Sat, 11 Jan 1997 11:27:54 -0600 (CST) From: Greg Lehey Received: (grog@localhost) by papillon.lemis.de (8.8.4/8.6.12) id JAA00366; Sat, 11 Jan 1997 09:29:01 -0600 (CST) Organisation: LEMIS, Schellnhausen 2, 36325 Feldatal, Germany Phone: +49-6637-919123 Fax: +49-6637-919122 Message-Id: <199701111529.JAA00366@papillon.lemis.de> Subject: Re: last command - wtmp changes? In-Reply-To: <199701071116.MAA05806@gilberto.physik.rwth-aachen.de> from Christoph Kukulies at "Jan 7, 97 12:16:40 pm" To: kuku@gilberto.physik.rwth-aachen.de Date: Sat, 11 Jan 1997 09:29:00 -0600 (CST) Cc: FreeBSD-current@FreeBSD.ORG (FreeBSD current users) Reply-to: grog@lemis.de (Greg Lehey) X-Mailer: ELM [version 2.4ME+ PL28 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Christoph Kukulies writes: >> As Christoph Kukulies wrote: >> >>> Strange, when I login in as user 'kuku' in one of my machines >>> I'm seeing the following picture: >>> >>> bach> last kuku | head >>> kuku ttyp0 137.226.31.18 Mon Jan 6 10:10 still logged in >>> kuku ttyp0 137.226.31.18 Mon Jan 6 10:08 - 10:09 (00:00) >>> kuku ttyp0 137.226.31.18 Mon Jan 6 10:07 - 10:08 (00:01) >>> kuku ttyp0 gilberto Sat Jan 4 21:42 - 21:43 (00:00) >>> kuku ttyp0 137.226.145.27 Fri Jan 3 10:12 still logged in >>> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ >>> This connection doesn't exist. >> >> That only means the connection broke, but telnetd (or whatever it has >> been) has ``forgotten'' to write the logout entry in wtmp. > > Well, I know of these situations sometimes happening but what I meant > was: Why does this 'broken' connection in last 'kuku' only show when > I'm logged in as user kuku and does not show up in the output of > the last command when I give it from another user account. > > Well, maybe it's not worth and has been some transient problem. > It's gone anyway now after I rebooted yesterday. It doesn't always go away that easily. I'm currently travelling with my notebook, and I find: === grog@papillon (/dev/ttyp1) ~ 1 -> last grog grog ttyp0 Wed Dec 31 18:00 still logged in freebie:0.0 grog Å2~ Sat Sep 23 06:24 still logged in unix:0.0 grog )L¼2ttyp0 Wed Dec 31 18:00 still logged in unix:0.0 grog k¹2~ Sat Sep 23 06:24 - 18:00 (12:36) unix:0.0 grog )¸2ttyp1 Wed Dec 31 18:00 - shutdown (9849+15:44) I shut freebie down yesterday before leaving, and I'm pretty sure I'm not connected to any other machine right now. And, of course, I've rebooted several times since then. *And* I didn't even have the machine on September 23. Note also the amusing system names. I'm guessing that last doesn't check for error conditions on resolver lookups. The time at the end of the last line is also amusing. At a rough guess, it goes back to the Epoch. Looks like there's a minefield of bugs for some interested party to clean up here. Greg