help: wtmpx - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Unix - 噫吁兮，危乎高哉

help: wtmpx

help: wtmpx# Unix - 噫吁兮，危乎高哉

h*y2002-11-22 08:11

1 楼

when I use "last" to view wtmpx file, I found that for some guys, their login
record were empty, but I 'm sure that they have logged in.How can they do
that?Who can tell me that ? Thank you so much.

h*y2002-11-22 08:11

2 楼

login
so, if I want to know whether a guy has logged into the system, I have to
check all the wtmpx files on different machines one by one?

【在 h*********y 的大作中提到】

: when I use "last" to view wtmpx file, I found that for some guys, their login
: record were empty, but I 'm sure that they have logged in.How can they do
: that?Who can tell me that ? Thank you so much.

m*e2002-11-22 08:11

3 楼

Not all services log the record. For example, seems rlogin doesn't.

【在 h*********y 的大作中提到】

s*s2002-11-22 08:11

4 楼

one possibility:
your computer has been hacked, there's a program called ZAP can
erase the records.
check the write permission of wtmpx.
another possibility:
if /var is ran out of space, you can not add records to wtmpx

【在 h*********y 的大作中提到】