Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!uunet!husc6!mit-eddie!ll-xn!ames!ptsfa!nonvon!gilsys!mc68020
From: mc68020@gilsys.UUCP (Thomas J Keller)
Newsgroups: comp.unix.xenix,comp.unix.questions
Subject: moby bignum tty accesses in /usr/adm/wtmp
Message-ID: <1134@gilsys.UUCP>
Date: Mon, 12-Oct-87 15:01:14 EDT
Article-I.D.: gilsys.1134
Posted: Mon Oct 12 15:01:14 1987
Date-Received: Fri, 16-Oct-87 06:41:52 EDT
Organization: Consequently Computers, Santa Rosa, Ca
Lines: 28
Keywords: wtmp, acctcom, what the hell?, HELP
Xref: mnetor comp.unix.xenix:960 comp.unix.questions:4530

Environment:   Tandy 6000, XENIX 3.1.2 (Tandy number, MIcroSlush # 3.0),
	       user accounting turned on, disk write verification on.
	       One phoneline, 300/1200 Hayes modem, one Wyse 75 terminal
	       on /dev/tty05, 12Mbyte primary, 1 10Mbyte secondary, 1
	       15Mbyte secondaryhard disks, 2 8" DSDD floppies, 1Mbyte RAM,
	       1 three-port serial expansion card.

Problem:  /usr/adm/wtpm growing at alarming rate (>500K/day).  Manual
	  checking revealed a *LARGE* number (on the order of 9000) accesses
	  to /dev/tty02 beginning at 03:00 and continuing through 04:29,
	  at the rate of approximately 95-120 accesses per MINUTE! (rate
	  is somewhat variable, depending on what else is happening on the
	  system.  In particular, the rate drops below 100 after 04:00, as
	  that is when I unbatch received news for the day)  Checking
	  the accounting data reveals no useful information,  as there are no
	  indiciations of any related processes at the times these accesses
	  are being logged by wtmp.  

Query:  what in the name of GHU is going on!????  Could the problem be in the
	Hayes modem?  If so, why would it start and stop the way it does?

	Any assistance greatly appreciated.


-- 
Tom Keller 
VOICE  : + 1 707 575 9493
UUCP   : {ihnp4,ames,sun,amdahl,lll-crg,pyramid}!ptsfa!gilsys!mc68020