Path: utzoo!mnetor!tmsoft!torsqnt!lethe!yunexus!ists!helios.physics.utoronto.ca!news-server.csri.toronto.edu!bonnie.concordia.ca!thunder.mcrcim.mcgill.edu!snorkelwacker.mit.edu!shelby!agate!eos!data.nas.nasa.gov!nameserver.nas.nasa.gov!davel From: davel@bedbug.arc.nasa.gov (Dave Liebreich) Newsgroups: comp.unix.admin Subject: Re: keeping wtmp Message-ID: Date: 8 Feb 91 16:40:14 GMT References: <194.27ac936a@vax1.cc.lehigh.edu> <1298@ecicrl.ocunix.on.ca> Sender: news@nas.nasa.gov Organization: NASA Ames, Moffett Field, CA Lines: 42 In-Reply-To: clewis@ferret.ocunix.on.ca's message of 8 Feb 91 04:19:52 GMT In article <1298@ecicrl.ocunix.on.ca> clewis@ferret.ocunix.on.ca (Chris Lewis) writes: In article <194.27ac936a@vax1.cc.lehigh.edu> lubkt@vax1.cc.lehigh.edu writes: >Is it true that the accounting program is resetting my wtmp? Probably. The System V accounting certainly does, and the Sun accounting is presumably summarizing it too. >I want retain wtmp records for a period longer than a day. Study the accounting software - it's probably already keeping wtmp records in a more compressed form. I must have missed the original post. On our Sun, I have modified the 4.1 accounting scripts to append each night's wtmp to /var/adm/acct/wtmplog - diff follows. Good Luck *** runacct.orig Tue Sep 18 13:59:53 1990 --- runacct Tue Sep 18 14:01:05 1990 *************** *** 337,342 **** --- 337,345 ---- rm -f nite/ptacct*.${_date} nite/ctacct.${_date} rm -f nite/wtmp.${_date} nite/wtmperror${_date} nite/active${_date} mv nite/tmpwtmp nite/owtmp + # davel 9/18/90 + cat nite/owtmp >> wtmplog + # davel 9/18/90 echo "system accounting completed at `date`" >> ${_active} logger -p daemon.err "********** SYSTEM ACCOUNTING COMPLETED **********" echo "COMPLETE" > ${_statefile} -- ========================================================================= Dave Liebreich davel@george.arc.nasa.gov Member Technical Staff (415) 604-4794 Sterling Software @ NASA Ames Research Center Mail Stop 233-15 Moffett Field, CA 94035 "The opinions expressed above are not necessarily those of my employer" doo dah doo dah