A correction to what I said: it appears to be "last login" data. I'm
assuming this is used for things like finger, etc. I would probably want
to keep as much of that type of data as possible, again, if it were my
system.

Recall that that inidividual says the file is REALLY only 64k, and the
file APPEARS to be 1.2TB.

Pieter (NL) wrote:

>Can't you use the command last (/var/log/wtmp) for that?
>The size is that big, according to a google search, because a userid exists
>which is probably -1 or realy big. That is why the size of the file is only
>64K with all the nulls left out. One record for each userid who has logged
>in. The index used in this file is userid.... So 1,2 Tb / recordsize if the
>big userid
>
>
>Ryan Novosielski wrote:
>  
>
>>lastlog contains the last logins to the system. While many hackers are
>>smarter than to leave it around, some are not, and if your machine is
>>brought down, it can be forensic evidence  (or at least clues) if you
>>have that file. I'd back it up if it were my system.
>>
>>Really, the thing that needs to be done is to find out why on this
>>system it is 1.2TB. Chances are, restarting whatever file is currently
>>holding lastlog open (or rotating the file) may take care of the
>>problem. I'd doubt this persists across reboot (unless this file is made
>>this large because of a different problem).
>>
>>Try running lsof on that file, if you have it.
>>
>>Pieter (NL) wrote:
>>
>>>From what I undestand of the manual and fd source code Bacula is actually
>>    
>>
>>>reading all 1.2 Tb of data to scan for blocks with all zero's. I could
>>>imagine this takes time.
>>>What is actually stored in /var/log/lastlog? Is it worth being backed up?
>>>
>>>Pieter
>>>
>>>      
>>>
>>Bacula-users mailing list
>>Bacula-users@lists.sourceforge.net
>>https://lists.sourceforge.net/lists/listinfo/bacula-users
>>
>>
>>    
>>
>--
>View this message in context: 
>http://www.nabble.com/Backups-too-big%2C-and-other-questions-t1502635.html#a4107091
>Sent from the Bacula - Users forum at Nabble.com.
>
>
>
>-------------------------------------------------------
>Using Tomcat but need to do more? Need to support web services, security?
>Get stuff done quickly with pre-integrated technology to make your job easier
>Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>_______________________________________________
>Bacula-users mailing list
>Bacula-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/bacula-users
>  
>


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to