From owner-freebsd-questions@FreeBSD.ORG Mon Jul 12 23:43:02 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A957E16A4CE for ; Mon, 12 Jul 2004 23:43:02 +0000 (GMT) Received: from pd3mo3so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4BE6343D41 for ; Mon, 12 Jul 2004 23:43:02 +0000 (GMT) (envelope-from aardvark@saintaardvarkthecarpeted.com) Received: from pd2mr5so.prod.shaw.ca (pd2mr5so-qfe3.prod.shaw.ca [10.0.141.8]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003)) with ESMTP id <0I0R000VBJ3LZ9@l-daemon> for freebsd-questions@freebsd.org; Mon, 12 Jul 2004 17:40:33 -0600 (MDT) Received: from pn2ml10so.prod.shaw.ca ([10.0.121.80]) by pd2mr5so.prod.shaw.ca (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0I0R00D73J3L3I50@pd2mr5so.prod.shaw.ca> for freebsd-questions@freebsd.org; Mon, 12 Jul 2004 17:40:33 -0600 (MDT) Received: from francisco.saintaardvarkthecarpeted.com (S010600609761a671.vc.shawcable.net [24.87.202.31]) by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.18 (built Jul 28 2003)) with ESMTP id <0I0R0078WJ3L30@l-daemon> for freebsd-questions@freebsd.org; Mon, 12 Jul 2004 17:40:33 -0600 (MDT) Received: from localhost (hardesty.saintaardvarkthecarpeted.com [192.168.23.1]) by francisco.saintaardvarkthecarpeted.com (8.12.11/8.12.11) with ESMTP id i6CNeShS054127; Mon, 12 Jul 2004 16:40:30 -0700 Received: from aardvark by localhost with local (Exim 4.32) id 1BkAPM-0003vr-Q7; Mon, 12 Jul 2004 16:40:28 -0700 Date: Mon, 12 Jul 2004 16:40:28 -0700 From: Saint Aardvark the Carpeted In-reply-to: <000901c46851$2b6beef0$150ba8c0@kyle> Sender: aardvark To: Kyle Mott Message-id: <20040712234028.GC14633@hardesty.saintaardvarkthecarpeted.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-disposition: inline User-Agent: Mutt/1.5.6+20040523i References: <000901c46851$2b6beef0$150ba8c0@kyle> cc: freebsd-questions@freebsd.org Subject: Re: Rebuilding wtmp X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Jul 2004 23:43:02 -0000 Kyle Mott disturbed my sleep to write: > I read a few manpages and did some google'ing, and couldn't find much of > anything about rebuilding wtmp. I tried just moving wtmp to wtmp.old and > then doing 'touch wtmp', then logging out and back in, but it still > reads 31Dec69. Is there some way to fix this? Thanks all. It's possible that there's some process holding open wtmp. (You could check this by adding lsof ("list open files") from ports -- *very* handy to have around on general principle). If this is the case, probably the easiest way to fix things would be to rename the file, touch wtmp, then reboot. Interestingly enough, a Google for "wtmp freebsd" turned up this message from the FreeBSD-Security list: http://archives.neohapsis.com/archives/freebsd/2001-07/0055.html which suggests "cp /dev/null /var/log/wtmp" to fix things -- at least on Solaris. I am now blessing your keyboard... -- Saint Aardvark the Carpeted aardvark@saintaardvarkthecarpeted.com Because the plural of Anecdote is Myth.