Currently if a user is logged in while logrotate renames the /var/log/wtmp file then the command "last -i -f /var/log/wtmp.1" will give a result such as the following: root pts/0 10.0.0.1 Fri Jan 16 13:17 gone - no logout
Also the command "last -i" will not display anything about the user in question (it will disregard the end entry). Would it hurt to have a duplicate start entry in a wtmp file? If not then is there any reason not to duplicate the entries from sessions in progress from the wtmp.1 file to the wtmp file so that "last" will display all sessions completely? -- russ...@coker.com.au http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org