Symptom: The command 'last' wasn't reporting any activity after Dec 18
of last year.
Clues: 'last' gets its data from /var/adm/wtmpx. Logging is controlled
by the accounting package, which is started/stopped with /etc/init.d/acct.
Solution: stop accounting, remove /var/adm/pacct manually, restart
accounting.
Why? I think that wtmpx got corrupted (maybe during a disk full) and last
couldn't read past the corrupted entry.
Thanks for insight from:
Ric Anderson <ric@Artisoft.COM>
Ray Brownrigg <ray@isor.vuw.ac.nz>
Casper Dik <casper@fwi.uva.nl>
------------------------------------------------------------------------------
Jeff Victor The SageNet `Net Sage' victoj@sage.edu
Network Administrator 518-270-2354
The Sage Colleges Any opinions detected here are
Troy, New York probably your imagination running wild.
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:10:14 CDT