SUMMARY: 'last' broken

From: Jeff Victor (victoj@kellas.Sage.EDU)
Date: Wed Jan 18 1995 - 13:49:32 CST


Symptom: The command 'last' wasn't reporting any activity after Dec 18
of last year.

Clues: 'last' gets its data from /var/adm/wtmpx. Logging is controlled
by the accounting package, which is started/stopped with /etc/init.d/acct.

Solution: stop accounting, remove /var/adm/pacct manually, restart
accounting.

Why? I think that wtmpx got corrupted (maybe during a disk full) and last
couldn't read past the corrupted entry.

Thanks for insight from:

Ric Anderson <ric@Artisoft.COM>
Ray Brownrigg <ray@isor.vuw.ac.nz>
Casper Dik <casper@fwi.uva.nl>

------------------------------------------------------------------------------
Jeff Victor The SageNet `Net Sage' victoj@sage.edu
Network Administrator 518-270-2354
The Sage Colleges Any opinions detected here are
Troy, New York probably your imagination running wild.
-------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:10:14 CDT