3 Feb
2003
3 Feb
'03
14:30
I hope it's just a corrupted file. The first feeling you get from a bizarre
entry in your "last" is "they're in!" Anyway I keep a big eye open at the
moment.
So, in addition to check every single log line, do you suggest a way to
track who is corrupting the wtmp?
Cheers,
Pep.
----- Original Message -----
From: "Jerry Feldman"
Zero the wtmp file. (remove it and touch it). If you see those entries again try to track down the app that is corrupting it, such as a telnet or ssh client.