OpenVZ Forum


Home » General » Support » wtmp growth abnormal?
wtmp growth abnormal? [message #9203] Fri, 22 December 2006 01:45 Go to next message
jubo is currently offline  jubo
Messages: 8
Registered: December 2006
Junior Member
I am running 7 vps on top of gentoo (all gentoo templates as well). I was noticing my free space going down rapidly and I looked at the big files on the system and every vps had a 1.5 GB wtmp file. Is there something I am doing wrong that creates such a large wtmp over time. I deleted one and sure enough, in about an hour it was already 5.0 MB.

Any ideas?

Thanks,
Curtis
Re: wtmp growth abnormal? [message #9212 is a reply to message #9203] Fri, 22 December 2006 07:10 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Hello,

and where did you get your gentoo template?

Thanks,
Vasily.
Re: wtmp growth abnormal? [message #9213 is a reply to message #9212] Fri, 22 December 2006 07:13 Go to previous messageGo to next message
jubo is currently offline  jubo
Messages: 8
Registered: December 2006
Junior Member
I got it from the openvz site a while back.
Re: wtmp growth abnormal? [message #9223 is a reply to message #9213] Fri, 22 December 2006 08:40 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Well, /var/log/wtmp size should increase each time you're logging to VE. Does it happen often? Maybe some robots enter (via ssh, ftp, telnet, ....) VE once a minute or something like that?
Re: wtmp growth abnormal? [message #9224 is a reply to message #9223] Fri, 22 December 2006 08:42 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
BTW, you can check it by `last` command.
Re: wtmp growth abnormal? [message #9225 is a reply to message #9224] Fri, 22 December 2006 08:45 Go to previous messageGo to next message
jubo is currently offline  jubo
Messages: 8
Registered: December 2006
Junior Member
This output of the last command looks rather odd:
reboot system boot 2.6.16-026test01 Wed Dec 20 22:24 (1+10:20)
reboot system boot 2.6.16-026test01 Wed Oct 25 21:58 (57+10:46)
reboot system boot 2.6.16-026test01 Mon Jul 17 02:32 (158+06:12)
reboot system boot 2.6.16-026test01 Mon Jul 17 02:31 (00:00)

Any ideas why reboot is logging in?
Re: wtmp growth abnormal? [message #9226 is a reply to message #9225] Fri, 22 December 2006 08:51 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
I only can say this is the way how it works Smile
Every reboot is logging.
Do you reboot VE so often? Smile
Re: wtmp growth abnormal? [message #9227 is a reply to message #9226] Fri, 22 December 2006 08:57 Go to previous messageGo to next message
jubo is currently offline  jubo
Messages: 8
Registered: December 2006
Junior Member
Not that I know of. I use the VEs all day long and they aren't rebooting AFAIK. Could this have to do with the inittab or something. What else could be causing it?

Here is what it looks like.

# Default runlevel.
id:3:initdefault:

# System initialization, mount local filesystems, etc.
si::sysinit:/sbin/rc sysinit

# Further system initialization, brings up the boot runlevel.
rc::bootwait:/sbin/rc boot

l0:0:wait:/sbin/rc shutdown 
l1:S1:wait:/sbin/rc single
l2:2:wait:/sbin/rc nonetwork
l3:3:wait:/sbin/rc default
l4:4:wait:/sbin/rc default
l5:5:wait:/sbin/rc default
l6:6:wait:/sbin/rc reboot
#z6:6:respawn:/sbin/sulogin

# TERMINALS
c1:12345:respawn:/sbin/agetty 38400 tty1 linux
c2:2345:respawn:/sbin/agetty 38400 tty2 linux
c3:2345:respawn:/sbin/agetty 38400 tty3 linux
c4:2345:respawn:/sbin/agetty 38400 tty4 linux
c5:2345:respawn:/sbin/agetty 38400 tty5 linux
c6:2345:respawn:/sbin/agetty 38400 tty6 linux

# SERIAL CONSOLES
#s0:12345:respawn:/sbin/agetty 9600 ttyS0 vt100
#s1:12345:respawn:/sbin/agetty 9600 ttyS1 vt100

# What to do at the "Three Finger Salute".
ca:12345:ctrlaltdel:/sbin/shutdown -r now

# Used by /etc/init.d/xdm to control DM startup.
# Read the comments in /etc/init.d/xdm for more
# info. Do NOT remove, as this will start nothing
# extra at boot if /etc/init.d/xdm is not added
# to the "default" runlevel.
x:a:once:/etc/X11/startDM.sh
Re: wtmp growth abnormal? [message #9228 is a reply to message #9227] Fri, 22 December 2006 09:05 Go to previous messageGo to next message
Vasily Tarasov is currently offline  Vasily Tarasov
Messages: 1345
Registered: January 2006
Senior Member
Do I understand you right, that wtmp file is full of "reboot records"? And these records persist even if you haven't rebooted VE?

Thanks,
Vasily.
Re: wtmp growth abnormal? [message #9565 is a reply to message #9228] Wed, 10 January 2007 05:14 Go to previous message
jubo is currently offline  jubo
Messages: 8
Registered: December 2006
Junior Member
Sorry for the late response.

I just ran a test. I had one VE with a 14MB wtmp file

Here is my output of last

reboot system boot 2.6.16-026test01 Wed Jan 10 05:10 (00:00)
reboot system boot 2.6.16-026test01 Tue Jan 9 06:49 (22:20)

wtmp begins Tue Jan 9 06:49:50 2007

I restarted the VE and the wtmp file still remains at 14MB.

Any ideas?
Previous Topic: Windows as guest O/S
Next Topic: OpenVZ fails to start in Debian Etch
Goto Forum:
  


Current Time: Thu Mar 28 13:20:22 GMT 2024

Total time taken to generate the page: 0.01729 seconds