Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
To: cygwin AT cygwin DOT com
From: =?ISO-8859-1?Q?Ren=E9_Berber?= <rberber AT prodigy DOT net DOT mx>
Subject:  Re: /var/log/wtmp problem
Date:  Mon, 12 Sep 2005 02:15:42 -0500
Lines: 52
Message-ID: <dg39v0$ln3$1@sea.gmane.org>
References:  <OF7363134B DOT 5FF395BF-ONC125707A DOT 0022A9B3-C125707A DOT 002399CC AT philips DOT com>
Mime-Version:  1.0
Content-Type:  text/plain; charset=ISO-8859-1
Content-Transfer-Encoding:  quoted-printable
User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317)
In-Reply-To: <OF7363134B.5FF395BF-ONC125707A.0022A9B3-C125707A.002399CC@philips.com>
OpenPGP: url=ldap://keyserver.pgp.com
X-IsSubscribed: yes

Jurgen Defurne wrote:
> Hello,
>=20
> Can someone explain for what /var/log/wtmp is used ?
>=20
> It seems that this file grows very quickly in our Cygwin environment, and=
=20
> I
> want to find out which programs write to this file. /var/log/wtmp gets
> an update almost every two seconds here.
>=20
> We do not use very much programs, I think this covers the complete
> list :
> - screen (no reference to wtmp found in info)
> - bash (standard shell)
> - Perl (background programs/ exec ?)
> - ssh
> - rxvt
> - watch

You can find some info about it in man last:

NAME
       last, lastb - show listing of last logged in users

SYNOPSIS
       last [-R] [-num] [ -n num ] [-adiox] [ -f file ] [name...]  [tty...]
       lastb [-R] [-num] [ -n num ] [ -f file ] [-adiox] [name...]  [tty...]

DESCRIPTION
       Last  searches  back through the file /var/log/wtmp (or the file des=
ig-
       nated by the -f flag) and displays a list of all users logged  in  (=
and
       out)  since  that  file  was  created.  Names of users and tty's can=
 be
       given, in which case last will show only  those  entries  matching  =
the
       arguments.   Names  of ttys can be abbreviated, thus last 0 is the s=
ame
       as last tty0.
...

If your wtmp is growing that much you have a problem I haven't seen, take a=
 look
at the output of "last | head" .

HTH
--=20
Ren=E9 Berber


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/