Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
To:	cygwin AT cygwin DOT com
From:	=?ISO-8859-1?Q?Ren=E9_Berber?= <rberber AT prodigy DOT net DOT mx>
Subject:	Re: /var/log/wtmp problem
Date:	Mon, 12 Sep 2005 02:15:42 -0500
Lines:	52
Message-ID:	<dg39v0$ln3$1@sea.gmane.org>
References:	<OF7363134B DOT 5FF395BF-ONC125707A DOT 0022A9B3-C125707A DOT 002399CC AT philips DOT com>
Mime-Version:	1.0
User-Agent:	Mozilla Thunderbird 1.0.2 (Windows/20050317)
In-Reply-To:	<OF7363134B.5FF395BF-ONC125707A.0022A9B3-C125707A.002399CC@philips.com>
OpenPGP:	url=ldap://keyserver.pgp.com
X-IsSubscribed:	yes

Jurgen Defurne wrote:
> Hello,
>=20
> Can someone explain for what /var/log/wtmp is used ?
>=20
> It seems that this file grows very quickly in our Cygwin environment, and=
=20
> I
> want to find out which programs write to this file. /var/log/wtmp gets
> an update almost every two seconds here.
>=20
> We do not use very much programs, I think this covers the complete
> list :
> - screen (no reference to wtmp found in info)
> - bash (standard shell)
> - Perl (background programs/ exec ?)
> - ssh
> - rxvt
> - watch

You can find some info about it in man last:

NAME
       last, lastb - show listing of last logged in users

SYNOPSIS
       last [-R] [-num] [ -n num ] [-adiox] [ -f file ] [name...]  [tty...]
       lastb [-R] [-num] [ -n num ] [ -f file ] [-adiox] [name...]  [tty...]

DESCRIPTION
       Last  searches  back through the file /var/log/wtmp (or the file des=
ig-
       nated by the -f flag) and displays a list of all users logged  in  (=
and
       out)  since  that  file  was  created.  Names of users and tty's can=
 be
       given, in which case last will show only  those  entries  matching  =
the
       arguments.   Names  of ttys can be abbreviated, thus last 0 is the s=
ame
       as last tty0.
...

If your wtmp is growing that much you have a problem I haven't seen, take a=
 look
at the output of "last | head" .

HTH
--=20
Ren=E9 Berber


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -