[6430] in bugtraq
Re: wtmpx utility for solaris
daemon@ATHENA.MIT.EDU (Casper Dik)
Wed Apr 1 11:32:34 1998
Date: Wed, 1 Apr 1998 10:29:07 +0200
Reply-To: Casper Dik <casper@HOLLAND.SUN.COM>
From: Casper Dik <casper@HOLLAND.SUN.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Your message of "Tue, 31 Mar 1998 13:10:11 +0200."
<Pine.LNX.3.96.980331130353.598A-100000@Capricorn>
>It seems like Solaris uses wtmpx for the continous logging. wtmp is used
>for the accounting system, and is removed evry night if accounting is
>running.
Just to make sure that there's not too much confusion on wtmp vs wtmpx
and utmp vs utmpx, this is how it works;
wtmp - old SYSV style wtmp files (see utmp.h), keeps record
of all log in/log outs
wtmpx - eXtended version of wtmp: adds hostname and extends other
records (32 char user vs 8 char user, 32 bit pid vs 16 bit
pid) See utmpx.h
wtmp and wtmpx record the same information in parallel (the routines
that update them update both) wtmp if for backward compatibility.
Wtmp will go away.
Casper
