last reports 'crash' at logout

last reports 'crash' at logout

Post by Mik Dav » Sat, 19 Mar 1994 23:13:05



  strange behaviour with wtmp/last. When I do "last" I get the following
  [extract only]

root     tty2         Fri Mar 18 14:05 - 14:08 (still logged in)
mik      tty1         Fri Mar 18 13:57 - 14:08 (still logged in)
reboot   system boot  Fri Mar 18 13:57 - 14:08  (00:10)
reboot   system boot  Fri Mar 18 01:13 - 13:57  (12:43)
mik      tty4         Fri Mar 18 01:11 - crash  (00:02)
root     tty1         Fri Mar 18 01:11 - crash  (00:02)
reboot   system boot  Fri Mar 18 01:11 - 01:13  (00:02)
reboot   system boot  Fri Mar 18 01:10 - 01:11  (00:00)
mik      tty4         Fri Mar 18 01:08 - crash  (00:01)
root     tty1         Fri Mar 18 01:08 - crash  (00:02)
reboot   system boot  Fri Mar 18 01:08 - 01:10  (00:02)
reboot   system boot  Fri Mar 18 01:07 - 01:08  (00:00)
root     tty1         Fri Mar 18 01:03 - crash  (00:03)
reboot   system boot  Fri Mar 18 01:03 - 01:07  (00:03)
reboot   system boot  Fri Mar 18 01:02 - 01:03  (00:00)
root     tty1         Fri Mar 18 00:59 - crash  (00:03)
reboot   system boot  Fri Mar 18 00:59 - 01:02  (00:03)
reboot   system boot  Fri Mar 18 00:58 - 00:59  (00:00)
root     tty4         Fri Mar 18 00:47 - crash  (00:10)
mik      tty1         Fri Mar 18 00:02 - crash  (00:55)
reboot   system boot  Fri Mar 18 00:02 - 00:58  (00:56)
reboot   system boot  Thu Mar 17 21:03 - 00:02  (02:58)
mik      tty4         Thu Mar 17 21:01 - crash  (00:01)
andrew   ttyS1        Thu Mar 17 21:00 - crash  (00:03)
mik      ttyS1        Thu Mar 17 20:59 - crash  (00:04)
root     tty1         Thu Mar 17 20:58 - crash  (00:05)
reboot   system boot  Thu Mar 17 20:58 - 21:03  (00:05)
reboot   system boot  Thu Mar 17 20:57 - 20:58  (00:00)
.
.
.

  Why are all my users listed as "crash" in the logout time field? I could
understand it if the reboot had killed their login session every time but in
several of the above cases, the user logged out before the system was rebooted
and in between them logging out and the reboot, last correctly reported their
logout time. After the reboot, it says "crash".

  Does anybody know why this is?

    Mik
--
___________________________________________.
 Mik Davis, Mexborough, South Yorkshire    |   .  .  __          .
                                           |   |\/|  | \  _,_  _  _

 
 
 

last reports 'crash' at logout

Post by Mik Dav » Mon, 21 Mar 1994 23:43:48


:   strange behaviour with wtmp/last. When I do "last" I get the following
:   [extract only]

[wtmp extract deleted]

:   Why are all my users listed as "crash" in the logout time field? I could
: understand it if the reboot had killed their login session every time but in
: several of the above cases, the user logged out before the system was rebooted
: and in between them logging out and the reboot, last correctly reported their
: logout time. After the reboot, it says "crash".

  I just discovered that the "time on" field in the 'last' display is *not*
the time the user was logged on for but is the time between the user logging on
and the machine rebooting.
  Maybe there is a problem with last?

--
___________________________________________.
 Mik Davis, Mexborough, South Yorkshire    |   .  .  __          .
                                           |   |\/|  | \  _,_  _  _


 
 
 

1. The 'last' command doesn't record users logout

It seems that the 'last' command only shows who logged in at what time,
but when the user has logged out, it fail to record it. So the user
once logged in will always recorded as login:

user1    ttyp7        Thu Dec  9 15:25 - 01:13 (still logged in)

user1 logout at 15:30 actually.

What is wrong with it? Where should I start looking?
Also I would like to log the machine that the person is login
from, like:

user2   ttyp2    halfdome.eecg.to Tue Dec  7 18:51 - 19:57  (01:05)

THanks
--

Daniel Y.H. Wong                                        UofT:(416)978-1659

--

2. Where to get sockets FAQ

3. 'last' reports users logged in erroneously...

4. HELP! a.out won't run

5. Help: problems with 'w', 'who' and 'last'

6. global konquerer settings

7. Where's Finger's 'last login' info stored?

8. SCSI (Ultrastor 14F from Gateway is not recognized).

9. Netatalk: 'afpd' reports unresolved symbol '__xstat'

10. 2.4.14-pre8: 'free' still reports bogus 'cached' value.

11. last reporting users logged in when they're not

12. 'last' command doesn't show complete login times

13. where's the source for 'last'?