Re: rsh messages and wtmp

You could use fwtmp and grep to trim wtmp on a regular basis.



Here are some commands from the fwtmp man page:



/usr/sbin/acct/fwtmp < /var/adm/wtmp > dummy.file

/usr/sbin/acct/fwtmp -ic < dummy.file > /var/adm/wtmp





Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation
Office Phone: (585) 771-4952

________________________________

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Robert Miller
Sent: Tuesday, May 29, 2007 6:32 PM
To: aix-l@xxxxxxxxxxxxx
Subject: rsh messages and wtmp



Folks,



We have a box that copies several files to other boxes via rcp using a
shell script. The script runs once a minute through cron.



This causes quite a few rsh messages in wtmp, which I have had to clear
out on a consistent basis. I have had the author of the script pare the
copies down to the bare minimum, which has helped, but I'm still in the
same boat - it just takes longer to fill up.



Unfortunately, NFS isn't really an option because we can't use
hardmounts, and the automounter has caused me more grief than I'd like
to think about. I'm also not really wild about the idea of having
.netrc files sitting around if I can avoid it - and I believe ftp would
still cause an entry in wtmp anyways.



Other than rolling off the wtmp file to tape every week or month (the
rsh messages take up 90+% of the wtmp file), does anyone have any ideas
on how to move these files around using a script, without causing a
bunch of messages in wtmp?



TIA,



--rm

Relevant Pages

  • Re: rsh messages and wtmp
    ... It compresses at about 30 to 1. ... Subject: rsh messages and wtmp ... Isn't there a script when audit features are turned on to summarize ...
    (AIX-L)
  • Re: using Awk, Sed, last to get login hours
    ... using C would be great, but then, solaris boxes no longer come with compilers. ... that would defeat the purpose of the script, which I hope can be used on all my sun boxes without libraries involved. ... how do i get wtmp start? ... first row, and also last 2 lines of output which states wtmp time ...
    (comp.unix.solaris)
  • rsh messages and wtmp
    ... The script runs once a minute through cron. ... This causes quite a few rsh messages in wtmp, which I have had to clear ...
    (AIX-L)
  • Re: rsh messages and wtmp
    ... Subject: rsh messages and wtmp ... You could use fwtmp and grep to trim wtmp on a regular basis. ... The script runs once a minute through cron. ...
    (AIX-L)
  • Re: rsh messages and wtmp
    ... It's more secure and I don't think it logs to wtmp. ... dissemination or other use of, or taking of any action in reliance upon, this ... Subject: rsh messages and wtmp ... The script runs once a minute through cron. ...
    (AIX-L)