Different wtmp processing methods in AIX and Linux

Different wtmp processing methods in AIX and Linux wtmp record user logon and exit events. it is similar to the utmp log file, but it increases with the increase in the number of logins, and some system ftp access is also recorded in this file, it also records the normal system exit time, and records user logon and exit events in different wtmp handling methods in AIX and Linux. it is similar to the utmp log file, but it increases with the increase in the number of logins, and some system ftp access is also recorded in this file, it also records the normal system exit time and can be accessed using the ac and last commands. 1. it will not automatically decrease as information increases. 2. it may have a corresponding storage cycle based on the default settings of different systems. 3. it can use last to view the record Aix: last-f/var/adm/wtmp-n 10 Linux: last-f/var/log/wtmp-n 10 Linux: the wtmp file is set in/etc/logrotate. conf/var/log/wtmp {monthly minsize 1 M create 0664 root utmp rotate 1} you can see that the wtmp file is calculated by month, that is, the login information of the last month is recorded. If you want to edit the file, try Aix:/var/adm/wtmp. if the file is too large, you may need to clear or sort it out. Return to Zero: cp/dev/null/var/adm/wtmp. to partially clean up the file, run the fwtmp command to convert the file wtmp to an ASCII file dummy. file. after editing, convert the ASCII file into a binary file, as shown in the following code: 1. Convert/usr/sbin/acct/fwtmp </var/adm/wtmp> dummy. file, 2. editing a series of filters ...... For example, tail-n 10000/tmp/dummy. file>/tmp/temp. file only saves the last 10000 rows of information to temp. file3. convert back to the binary file/usr/sbin/acct/fwtmp-ic </tem/temp. file>/var/adm/wtmp