lastlog in /var/adm

  • Permalink
  • submit to reddit
  • Email
  • Follow


Hi,

There is this file in /var/adm/lastlog. I would like to know how to
read it, any pointer is appreciated.

Thanks in advance.
0
Reply Dolphin 6/3/2008 12:43:36 AM

See related articles to this posting


On Jun 3, 10:43 am, Dolphin <yc282...@yahoo.com.sg> wrote:
> Hi,
>
> There is this file in /var/adm/lastlog. I would like to know how to
> read it, any pointer is appreciated.
>
> Thanks in advance.

I think your better off using the 'last' command as it displays data
in a more readable format. Examples include:

# man last
# last
# last shutdown
# last login
# last root
# last reboot
0
Reply webigh86 6/3/2008 3:14:39 AM

In article <50b5bde7-73e2-4d39-9913-17bf90cf9769@w4g2000prd.googlegroups.com>,
	webigh86@gmail.com writes:
> On Jun 3, 10:43 am, Dolphin <yc282...@yahoo.com.sg> wrote:
>> Hi,
>>
>> There is this file in /var/adm/lastlog. I would like to know how to
>> read it, any pointer is appreciated.
>>
>> Thanks in advance.
> 
> I think your better off using the 'last' command as it displays data
> in a more readable format. Examples include:

last(1) doesn't display /var/adm/lastlog at all.
The only command which does is finger(1).
Other than that, it's used by login, sshd, pam modules, and the like.

The file is a (sparse) array of struct lastlog (/usr/include/lastlog.h)
indexed by uid. Hence it can appear very big if you have large uids, but
it should be a sparse file (unless copied by anything which doesn't
preserve sparse files).

-- 
Andrew Gabriel
[email address is not usable -- followup in the newsgroup]
0
Reply andrew 6/3/2008 8:35:51 AM
comp.unix.solaris 25778 articles. 87 followers. Post

2 Replies
3156 Views

Similar Articles

[PageSpeed] 43


  • Permalink
  • submit to reddit
  • Email
  • Follow


Reply:

Similar Artilces:

/var/adm/pkg
If /var/adm/pkg is inadvertently evacuated, is the machine effectively headed for a reinstall? .. If you mean /var/sadm/pkg, no, a reinstall is not needed. The only problem it will cause is pkginfo and pkgrm won't work. ...

/var/adm/sulog
Hi, There are two different formats of entries in /var/adm/sulog: SU 07/05 07:11 + console LOGIN-user1 SU 07/05 07:11 + msglog root-oracle SU 07/05 07:11 + msglog root-user1 They are generated because of "su - user -c" in the auto-start script. My question is: When will "console" be used? And when will "msglog" be used? Thank you, Victor ...

/var/adm/messages
one of the servers I use doesn't seem to be logging much in /var/adm/messages it's only logging 'su - <user> succeeded' etc - why is this? Geezer From The Freezer <Geezer@Freezer.com> writes: >one of the servers I use doesn't seem to be logging much in /var/adm/messages >it's only logging 'su - <user> succeeded' etc - why is this? Check the settings in "/etc/syslog.conf". Compare with other systems that are logging more. On Wed, 16 Jun 2004 14:08:30 +0100, Geezer From The Freezer <Geezer@Freezer.com> wrote: >one o...

Size of /var/log/lastlog
I installed RH 7.3 abotu 2 days ago. Since then my lastlog file has grown very large: [root@skywalker log]# ls -l /var/log/last* -rw-r--r-- 1 root root 19136220 Nov 5 12:04 /var/log/lastlog Is this normal? -- J�rn Dahl-Stamnes On 2004-11-05, J�rn Dahl-Stamnes <novalid@nowhere.no> wrote: > I installed RH 7.3 abotu 2 days ago. Since then my lastlog file has > grown very large: > [root@skywalker log]# ls -l /var/log/last* > -rw-r--r-- 1 root root 19136220 Nov 5 12:04 /var/log/lastlog > Is this normal? No is not. Lastlog should contains the defi...

logadm and /var/adm/messages
Hi, Can someone explain to me how the new logadm works on Solaris 9 and how /var/adm/messages are rotated? It seems that /etc/logadm.conf is created every often. I could not find much document on this. Thank you, Vahid. ...

Re: /var/adm/messages
This is a multi-part message in MIME format. ------=_NextPart_000_035F_01C58E2B.66395B20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi,=20 We are getting the following messages in /var/adm/messages file while = executing my user space application. Jul 19 11:12:06 asrv4 genunix: [ID 936769 kern.info] ses2 is = /ssm@0,0/pci@19,600000/pci@1/scsi@4/ses@2,0 Jul 19 11:12:06 asrv4 scsi: [ID 193665 kern.info] ses35 at qus2: target = 3 lun 0 Jul 19 11:12:06 asrv4 scsi: [ID 193665 kern.info] ses35 at qus2: = target 3 lun 0 Jul 19 11:12:06 asr...

/var/log/lastlog too large
While running mondoarchive, and having it end up in an md5sum loop, I noticed that the size of /var/log/lastlog was 1254130450140 bytes. Yes, that's 13 digits long. So I deleted it. So far, nothing has re-created it. And that's the question: What creates /var/log/lastlog ? The system, FC3 2.6.9-1.681_FC3smp, seems to be running along just fine. Of course, the lastlog command complains that the file doesn't exist. Any suggestions about how to "recover" from this condition would be welcomed. Thanks. On 2004-12-11, Fred <Use-Author-Supplied-Address-Header@[127....

Cannot create /var/adm/utmpx
Hi, Today we have had a power failure, and then the workstation (Solaris 8, Sparc) can't boot. Now, when we try to boot, it prints: INIT: Cannot create /var/adm/utmp or /var/adm/utmpx INIT: failed write of utmpx entry: " " INIT: failed write of utmpx entry: " " INIT: SINGLE USER MODE ENTER RUN LEVEL (0-6, s or S) [3]: AND FOR ANY RUN LEVEL I TRY IT PRINTS: INIT: Cannot create /var/adm/utmp or /var/adm/utmpx and asks me to choose a run level all over again. I've tried to boot from cd CD-ROM and run and fsck on the / (root) (/var ...

dmesg not from /var/adm/messages
messages will be logged. AUTHOR dmesg was developed by the University of California, Berkeley. FILES /var/adm/messages error log (conventional location) /var/adm/msgbuf memory scratch file for - option /dev/kmem special file containing the image of kernel virtual memory /stand/vmunix the kernel, system name list SEE ALSO savecore(1M). Hewlett-Packard Company - 1 - HP-UX Release 11.00: October 1997 # ls -ltr /var/adm/messages /var/adm/messages not found Please adv...

empty /var/adm/messages
Hi: I am writting because my /var/adm/messages it is allways empty. Apparently everything it is correct configured. This is my /et/syslog.conf cat /etc/syslog.conf #ident "@(#)syslog.conf 1.5 98/12/14 SMI" /* SunOS 5.0 */ # # Copyright (c) 1991-1998 by Sun Microsystems, Inc. # All rights reserved. # # syslog configuration file. # # This file is processed by m4 so be careful to quote (`') names # that match m4 reserved words. Also, within ifdef's, arguments # containing commas must be quoted. # *.err;kern.notice;auth.notice /dev/sysmsg *.er...

/var/adm/pacct madness
Hi, This is a standard solaris 9 box. The /var/adm/pacct file is HUGE (300 Mb) and also, there are numerous /var/adm/pacct.* files that are also huge. I read the man pages but I am confused. Can I turn off accounting by removing/renaming /etc/rc3.d/S99acct ? If so, are there any security implications ? If I should not turn process acounting off (or prevent if from starting) how am I to reduce the size of the pacct files and remove the old ones ? We are not doing any "billing" on the machine (anyway, who does anyeay these days !) Thanks P.S: My old solaris 2.6 boxes do not...

/var/adm/pacct not rotated
Hello, On a Solaris 9 system I have the problem, that /var/adm/pacct is not rotated and the file is getting bigger and bigger: -rw-r--r-- 1 adm adm 306443200 Dec 3 09:23 pacct -rw-r--r-- 1 adm adm 10400 Apr 8 2005 pacct.0 -rw-r--r-- 1 adm adm 12840 Apr 8 2005 pacct.1 -rw-r--r-- 1 adm adm 9040 Feb 1 2005 pacct.10 -rw-r--r-- 1 adm adm 277480 Feb 1 2005 pacct.11 -rw-r--r-- 1 adm adm 951800 Feb 1 2005 pacct.12 -rw-r--r-- 1 adm adm 8520 Apr 6 2005 pacct.2 -rw-r--r-- 1 adm adm ...

db2fmcd in /var/adm/wtmpx
Hi all, I found the /var/adm/wtmpx file growing very fast because there are huge "db2fmcdfmcSF=E8=EA" strings repeating in the file. My environment is DB2 v8(FP14) + Solaris v9. Is that the DB2 Fault Monitor Coordinator caused this problem? Any ideas to fix it? Thanks in advance, Tony Could anybody help please? ...

[Newbie:] Where is my /var/adm/messages?
Hi all, I've installed OpenBSD 3.4 (Bootdisk C & FTP: OpenBSD 3.4 (GENERIC)). Now I'm installing a SpeedTouch USB modem, and I've to look for certain lines in /var/adm/messages... .... but ... .... I don't have a /var/adm/messages I don't even have the /var/adm directory. Can I just create both of them: $ mkdir /var/adm $ touch /var/adm/messages ??? Or do I've to do something else? Thx! Dimitry Schoenmakers The Netherlands d.h.y.schoenmakers[AT]gmx.net --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (ht...

/var/adm/ras/diag_log
Does anyone know how to clear down this file, we have a server that has a 500 meg+ /var/adm/ras/diag_log. I think if you null the file it can cause problems with error logging. Thanks -- Posted via http://dbforums.com I think it's ok to null the file. It's created when diag runs. uk03170 <member30505@dbforums.com> wrote in message news:<3371540.1063638129@dbforums.com>... > Does anyone know how to clear down this file, we have a server that has > a 500 meg+ /var/adm/ras/diag_log. > > I think if you null the file it can cause problems with error logging...

warning messages in /var/adm/messages
Hello, We have Fujitsu 650 machine, in /var/adm/messages it is throwing error: ********** Oct 25 18:44:33 in2ce2 scsi: [ID 107833 kern.warning] WARNING: /pci@89,2000/fibre-channel@1/sd@1,1 (sd233): Oct 25 18:44:33 in2ce2 SCSI transport failed: reason 'tran_err': giving up Oct 25 18:44:45 in2ce2 scsi: [ID 107833 kern.warning] WARNING: /pci@89,2000/fibre-channel@1/sd@1,2 (sd234): Oct 25 18:44:45 in2ce2 SCSI transport failed: reason 'tran_err': giving up ********** I have checked prtdiag, which shows "No Recent System Faults found" and in iostat -xPnce transortatio...

/var/adm/wtmp, malloc, and ENOMEM
Greetings, /var/adm/wtmp files were getting out of hand and I wanted to filter the file rather than zeroing it out. I found some code that would only keep the last x days but it required creating a temporary file in /tmp and then copying it back to /var/adm. I rewrote the code to load the contents of the wtmp file into memory and then write the filtered records in memory directly back to /var/adm/wtmp, eliminating the need for a temporary file. This worked great until I encountered a wtmp file that was 370 MB. malloc fails setting errno to ENOMEM (not enough storage space). My system has ...

Which script backs up /var/adm/message.#
I am looking for the system script that backs up the /var/adm/messages logs automatically in Solaris. I saw it years ago in script form. It creates the messages.0, messages.1 and ensures .0 is the latest. I'm looking to use it as an example to make easy and multiple backups of scripts prior to editing them. Can anyone help? Thanks much. "ChrisS" <chris.scarff@gmail.com> wrote in news:1141328254.235818.251990@j33g2000cwa.googlegroups.com: > I am looking for the system script that backs up the > /var/adm/messages logs automatically in Solaris. I saw it years &...

killed /var/adm/sw by accident
Is there a way to rebuild the patches/sowtware databases without reinstalling the whole system? "ArkanoiD" <arkenoi@gmail.com> writes: > Is there a way to rebuild the patches/sowtware databases without > reinstalling the whole system? I guess (except from restoring a backup) no. The system will continue to run, but you cannot add or remove software the way you are used to. As installed software and /var/adm/sw has to be consistent, I strongly suggest to reinstall your OS, or maybe just don't work as root in the future. Regards, Ulrich ...

INIT: Cannot create /var/adm/utmpx
On rebooting the os to run level 3, a message pops up and doesn't boot as shown down. INIT: Cannot create /var/adm/utmpx But iam able to enter into single user mode. if u have,please suggest any repair works. fsck didn't fix the problem. Thanks fo you help! Sascha Sascha B. wrote: > On rebooting the os to run level 3, a message pops up and doesn't boot as > shown down. > INIT: Cannot create /var/adm/utmpx > > But iam able to enter into single user mode. > if u have,please suggest any repair works. fsck didn't fix the problem. > > > T...

bootpd Error in /var/adm/messages
I see following line in /var/adm/messages: May 15 20:56:59 arizona bootpd[25845]: IP address not found: ab.bc.cd.nn ( where arizona is the hostname and ab.bc.cd.nn is the real IP address which I replaced with ab.bc.cd.nn (nn is different so it is giving this error for more than one IP Address) ) Any idea how do I resolve this ? Thanksk KP Kalpesh Parikh <parikhk@hotmail.com> wrote: > I see following line in /var/adm/messages: > May 15 20:56:59 arizona bootpd[25845]: IP address not found: ab.bc.cd.nn > ( > where arizona is the hostname and > ab.bc.cd.nn is the real I...

new entry in /var/adm/messages ?
unix: NOTICE: Previously reported error on page 0x00000000.2ee12000 cleared Is this a memory error? If so, where? - which bank, chip(s)? ================================================================= System Configuration: Sun Microsystems sun4u 8-slot Sun Enterprise E4500/E5500 System clock frequency: 84 MHz Memory size: 8192Mb ========================= CPUs ========================= Run Ecache CPU CPU Brd CPU Module MHz MB Impl. Mask --- --- ------- ----- ------ ------ ---- 0 0 0 336 4.0 US-II 2.0 0 1 1 ...

String of nulls in /var/adm/mesages
In debugging a Solaris 10 SPARC problem, I looked through the /var/adm/ messages file and found a long string of nulls before the usual system startup line: ^@^@^@^@^@^@Sep 28 14:11:42 c2539lui genunix: [ID 540533 kern.notice] ^MSunOS Release 5.10 Version Generic_120011-14 64-bit This line roughly corresponds with a log entry in our own software that indicates a problem so I have to believe it's significant. In a messages file that spans a dozen reboots, is there any particular reason why this reboot _only_ would have these spurious characters in its announcement? Thanks. ...

disk error from /var/adm/messages
We got the following error one time yesterday. When I looked at the metatool it shows that c0t8d0s0 is on Ciritical status. Does it mean that we have to replace this disk c0t8d0 at once? ----------------------------------------------------------- 1030. Oct 30 05:07:10 prodfin scsi: [ID 107833 kern.warning] WARNING: /pci@1f,4000/scsi@3/sd@8,0 (sd7): 1031. Oct 30 05:07:10 prodfin SCSI transport failed: reason 'timeout': retrying command 1033. Oct 30 05:07:23 prodfin scsi: [ID 107833 kern.warning] WARNING: /pci@1f,4000/scsi@3/sd@8,0 (sd7): 1034. Oct 30 05:07:23 prodfin ...