wtmps.4 (2010 09)

wtmps(4) wtmps(4)

NAME

wtmps, btmps - user login information

SYNOPSIS

#include <sys/types.h>

#include <utmps.h>

DESCRIPTION

wtmps and btmps hold user and accounting information for such commands as

last, who, write, and

File

btmps contains bad login entries for each invalid logon attempt. File

wtmps contains a record for

all logins and logouts apart from accounting records. These ﬁles contain

utmps-like structure, the key

elements of the structure are given below:

char ut_user[] User login name

char ut_id[] Unique Id to distinguish an entry

char ut_line[] Device name

pid_t ut_pid Process Id

short ut_type Type of Entry

struct ut_exit The exit status of a process

struct timeval ut_tv Time entry was made

char ut_host[] Host name, if remote

uint8_t ut_addr[] Internet Address of the Host,

if remote

short ut_addr_type Flag to identify type of address

in ut_addr

#define WTMPS_FILE "/var/adm/wtmps"

#define BTMPS_FILE "/var/adm/btmps"

Note that

wtmps and btmps tend to grow without bound, and should be checked regularly. Information

that is no longer useful should be removed periodically to prevent the ﬁle from becoming too large. Also

note that wtmps and btmps are not created by the programs that maintain them. Thus, if these ﬁles are

removed, login record-keeping is turned off.

AUTHOR

wtmps and btmps were developed by Hewlett-Packard Company.

FILES

/var/adm/wtmps

/var/adm/btmps

PAGE 1
wtmps(4) wtmps(4) NAME wtmps, btmps - user login information SYNOPSIS #include #include DESCRIPTION wtmps and btmps hold user and accounting information for such commands as last, who, write, and login (see last (1), who(1), write (1), and login (1)). File btmps contains bad login entries for each invalid logon attempt. File wtmps contains a record for all logins and logouts apart from accounting records.
PAGE 2
(Notes) A (Notes) wA 2 Hewlett-Packard Company −1− HP-UX 11i Version 3: September 2010