/usr/lib/acct/fwtmp trouble
While trying to trim my wmtpx file I found what I think is a bug.
I used:
/usr/lib/acct/fwtmp < /var/adm/wmtpx > /var/tmp/wtmp.ascii
/usr/bin/tail -500 /var/tmp/wmtp.ascii > /var/tmp/wtmpx-last500
/usr/lib/acct/fwtmp -ic </var/tmp/wtmpx-last500 >/var/tmp/wtmpx
When I now use the who /var/tmp/wtmpx command I get:
who: Error entry has ut_type of 14898
when maximim is 9
The value 14898 varies but is repeated over and over.
The original /var/adm/wtmpx file was not corrupt and had displayed no errors with the who command. Unless I am reading the fwtmp manual page incorrectly this command should allow me to trim my wmtpx file to the last 500 entries.
I am working on an Ultra 5 running Solaris 8 for this test, but this happens on most all of our Solaris systems.
I really do not want to just zero out the wtmpx file, and start over.
Any suggestions?
