Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   6591 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

CHKWTMP(1)							    CHKWTMP(1)

NAME
       chkwtmp - check wtmp-file for deleted entries

SYNOPSIS
       chkwtmp

DESCRIPTION
       Chkwtmp examines the file /var/log/wtmp for entries with no information
       (containing only null-bytes). If such entries  are  found  the  program
       prints the time window for the original entry. This is done by display‐
       ing the timestamps of the  wtmp-entry  before  and  after  the  deleted
       entry.

       To  run	chkwtmp	 you  need  read permission on the file /var/log/wtmp.
       Normally this file is world-readable  and  no  special  privileges  are
       required to run the checker.

FILES
       /var/log/wtmp	   login data base

SEE ALSO
       wtmp(4), who(1)

LIMITATIONS
       An  entry is recognized as overwritten if the time-information has been
       overwritten with null-bytes.

       This program was designed to run on SunOS 4.x systems  only.  On	 other
       systems the output is undefined...

7th Edition			Thu Oct 12 1994			    CHKWTMP(1)

Vote for polarhome