Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!mnetor!uunet!husc6!bloom-beacon!mgm.mit.edu!wolfgang From: wolfgang@mgm.mit.edu (Wolfgang Rupprecht) Newsgroups: comp.unix.xenix,comp.unix.questions Subject: Re: moby bignum tty accesses in /usr/adm/wtmp Message-ID: <1616@bloom-beacon.MIT.EDU> Date: Thu, 15-Oct-87 00:33:29 EDT Article-I.D.: bloom-be.1616 Posted: Thu Oct 15 00:33:29 1987 Date-Received: Sat, 17-Oct-87 02:38:19 EDT References: <1134@gilsys.UUCP> Sender: daemon@bloom-beacon.MIT.EDU Reply-To: wolfgang@mgm.mit.edu (Wolfgang Rupprecht) Organization: Independent Software Consultant Lines: 28 Keywords: wtmp, acctcom, what the hell?, HELP Xref: mnetor comp.unix.xenix:962 comp.unix.questions:4531 In article <1134@gilsys.UUCP> mc68020@gilsys.UUCP (Thomas J Keller) writes: >Problem: /usr/adm/wtpm growing at alarming rate (>500K/day). Manual > checking revealed a *LARGE* number (on the order of 9000) accesses > to /dev/tty02 beginning at 03:00 and continuing through 04:29, > at the rate of approximately 95-120 accesses per MINUTE! (rate > is somewhat variable, depending on what else is happening on the > system. In particular, the rate drops below 100 after 04:00, as > that is when I unbatch received news for the day) Checking > the accounting data reveals no useful information, as there are no > indiciations of any related processes at the times these accesses > are being logged by wtmp. You didn't mentions if /dev/tty02 was a dial-in dial-out or both. I assume that it is the modem line. I can think of two things that might do this. 1) both getty and some other program are both sucking down chars from tty02, ie. if you try to dial out on a line that still has getty enabled. Neither one would do too well here. 2) if your modem is echoing stuff back to getty (which echoes something to the modem .... ). In either case login wouldn't be too happy with what it got. Why not solve the mystery and put a terminal on the line and watch the chars fly? (just connect up the terminal's rs232 signal-ground and recieve lines to the tty as a monitor.) -- Wolfgang Rupprecht UUCP: mirror!mit-mgm!wolfgang ARPA: wolfgang@mgm.mit.edu (IP addr 18.82.0.114)