HPUX fwtmp[1m]

fwtmp(1M) fwtmp(1M)
NAME
fwtmp, wtmpfix - manipulate connect accounting records
SYNOPSIS
/usr/lib/acct/fwtmp [-ic]
/usr/lib/acct/wtmpfix [files]
DESCRIPTION
fwtmp
fwtmp reads from the standard input and writes to the standard output,
converting binary records of the type found in wtmp to formatted ASCII
records. The ASCII version is useful to enable editing, via ed(1),
bad records or general purpose maintenance of the file.
The argument -ic is used to denote that input is in ASCII form, and
output is to be written in binary form. (The arguments i and c are
independent, respectively specifying ASCII input and binary output,
thus -i is an ASCII to ASCII copy and -c is a binary to binary copy).
wtmpfix
wtmpfix examines the standard input or named files in wtmp format,
corrects the time/date stamps to make the entries consistent, and
writes to the standard output. A - can be used in place of files to
indicate the standard input. If time/date corrections are not
performed, acctcon1 will fault when it encounters certain date-change
records.
Each time the date is set, a pair of date change records is written to
/etc/wtmp. The first record is the old date denoted by the string old
time placed in the line field and the flag OLD_TIME placed in the type
field of the <utmp.h> structure. The second record specifies the new
date, and is denoted by the string new time placed in the line field
and the flag NEW_TIME placed in the type field. wtmpfix uses these
records to synchronize all time stamps in the file. wtmpfix nullifies
date change records when writing to the standard output by setting the
time field of the <utmp.h> structure in the old date change record
equal to the time field in the new date change record. This prevents
wtmpfix and acctcon1 from factoring in a date change record pair more
than once.
In addition to correcting time/date stamps, wtmpfix checks the
validity of the name field to ensure that it consists solely of
alphanumeric characters or spaces. If it encounters a name that is
considered invalid, it changes the login name to INVALID and write a
diagnostic to the standard error. This minimizes the risk that
acctcon1 will fail when processing connect accounting records.
DIAGNOSTICS
wtmpfix generates the following diagnostics messages:
Hewlett-Packard Company - 1 - HP-UX Release 9.0: August 1992
fwtmp(1M) fwtmp(1M)
Cannot make temporary: xxx failed to make temp file
Input truncated at offset: xxx missing half of date pair
New date expected at offset: xxx missing half of date pair
Cannot read from temp: xxx some error reading
Bad file at offset: xxx ut_line entry not digit, alpha, nor | or
{ (first character only checked)
Out of core: malloc fails. (Saves table of date changes)
No dtab: software error (rarely seen, if ever)
FILES
/usr/include/utmp.h
/etc/wtmp
SEE ALSO
acct(1M), acctcms(1M), acctcom(1M), acctcon(1M), acctmerg(1M),
acctprc(1M), acctsh(1M), ed(1), runacct(1M), acct(2), acct(4),
utmp(4).
BUGS
fwtmp generates no errors, even on garbage input.
STANDARDS CONFORMANCE
fwtmp: SVID2
wtmpfix: SVID2
Hewlett-Packard Company - 2 - HP-UX Release 9.0: August 1992