wtmpx utility for solaris

From: Ryan (warfat_private)
Date: Mon Mar 30 1998 - 03:18:31 PST

  • Next message: Rick Branson: "ConferenceRoom Exploit [tRa BuG LaBz0rz]"

      This message is in MIME format.  The first part should be readable text,
      while the remaining parts are likely unreadable without MIME-aware tools.
      Send mail to mimeat_private for more info.
    
    ---559023410-851401618-891254364=:19895
    Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
    Content-ID: <Pine.GSO.3.95.980330041759.22806B@goodguy>
    
    There seems to be a problem with the tmpx file for solairs.  Doesn't log
    the full IP's of the users loging in, it truncates it somehow.  Therefore,
    the 'last' utility is praticly useless when trying to track down someone.
    
    The wtmpx file logs the full data and doesn't truncate anything.  I
    could not find a utility that viewed the wtmpx file.  So, I wrote a quick
    one.  It has come in very handy.  I have attached the source code that I
    wrote.
    
    Feel free to revise the code or give comments.  If you do revise it,
    please leave my name / e-mail address on there somewhere so I could get
    contacted if someone makes it better so I can get a copy!  :)  It could
    have been writen cleaner, but it was a quicky to get the options I wanted
    on it.  I didn't want to spend a WHOLE lot of time on it, I just needed
    it working (if you know what I mean).
    
           ____
          |  _ \ _   _  __ _ _ __
          | |_) | | | |/ _` | '_ \
          |  _ <| |_| | (_| | | | |
          |_| \_\\__, |\__,_|_| |_|
                 |___/
        GoodNet System Administration
      warfat_private/ryanwat_private
    
    
    
    ---559023410-851401618-891254364=:19895
    Content-Type: TEXT/PLAIN; charset=US-ASCII; name="lastx.c"
    Content-Transfer-Encoding: BASE64
    Content-ID: <Pine.GSO.3.95.980330041831.22806C@goodguy>
    Content-Description: lastx.c
    
    LyoNCiAgICAgTGFzdHggdjEuMCAgICBXcml0dGVuIGJ5IFJ5YW4gV3lsZXIg
    IChyeWFud0Bnb29kbmV0LmNvbSkNCg0KICAgIA0KRGVjcmlwdGlvbjoNCg0K
    ICAgIEEgJ2xhc3QnIHR5cGUgdXRpbGl0eSBmb3IgU29sYXJpcyB3aGljaCBk
    aXNwbGF5cyB0aGUgZnVsbCBpbmZvcm1hdGlvbg0KZm9yIHRoZSB1c2Vycy4N
    Cg0KV2h5Og0KDQogICAgVGhlIHZlcnNpb24gb2YgU29sYXJpcyB3aGljaCBJ
    IHJ1biBoZXJlIChTb2xhcmlzIDIuNSBTcGFyYykgZG9lcyBub3QNCmxvZyB0
    aGUgd2hvbGUgSVAgb2YgdGhlIHVzZXJzIGluIHRoZSBmaWxlIHRoYXQgJ2xh
    c3QnIHVzZXMgdG8gZGlzcGxheSB0aGUNCmluZm9ybWF0aW9uICgvdmFyL2Fk
    bS90bXB4KS4gIEJ1dCBpdCBkb2VzIHN0b3JlIHRoZSBmdWxsIElQIGluIHRo
    ZQ0KL3Zhci9hZG0vd3RtcHggZmlsZS4gIFNvIHRoaXMgcHJvZ3JhbSBoZWxw
    cyBtZSB0byBmaW5kb3V0IHdoZXJlIHBlb3BsZSBhcmUNCmxvZ2dpbmcgaW4g
    ZnJvbSBBIExPVCBlYXNpZXIuICANCg0KRGlzY2xhbWVyOg0KDQogICAgSWYg
    dGhpcyBicmVha3Mgc29tZXRoaW5nLi4gZG9uJ3QgY29tZSBjcnlpbmcgdG8g
    bWUuLiBJJ20gbm90DQogICAgcmVzcG9uc2FibGUgZm9yIG51dGluLi4gDQoN
    Cg0KRGlzdGlidXRpb246DQoNCiAgICAgRmVlbCBGcmVlIHRvIGRpc3RyaWJ1
    dGUgdGhpcyB0byB3aG9tIGV2ZXIgY2FuIG1ha2UgdXNlIG9mIHRoaXMgdXRp
    bC4NCiAgICAgSXQgaGFzIGhlbHBlZCBtZSBvdXQgYSB0b24uIDopDQoNCiAg
    ICAgSSBoYXZlIG5vdCBhZGRlZCBpbiBhbnkgY29tbWVudHMgZHVlIHRvIGxh
    Y2sgb2YgdGltZS4gIFNvcnJ5Lg0KICAgICBJIHdlbGNvbWUgY29tbWVudHMv
    U3VnZ2VzdGlvbnMgdG8gbWFrZSBpdCBiZXR0ZXIgaWYgeW91IGNhcmUgdG8g
    c2VuZA0KICAgICBhbnkuICBPdGhlcndpc2UsIHVzZSBhdCB3aWxsLg0KDQoq
    Lw0KDQojaW5jbHVkZSA8c3RkaW8uaD4NCiNpbmNsdWRlIDx1dG1weC5oPg0K
    I2luY2x1ZGUgPHN5cy90eXBlcy5oPg0KI2luY2x1ZGUgPGZjbnRsLmg+DQoj
    ZGVmaW5lIFdUTVAgIi92YXIvYWRtL3d0bXB4Ig0KI2RlZmluZSBVVE1QICIv
    dmFyL2FkbS91dG1weCINCg0Kdm9pZCBubCgpDQp7DQogIHByaW50ZigiXG4i
    KTsNCn0NCg0Kdm9pZCBtYWluKGFyZ2MsYXJndikNCmludCBhcmdjOw0KY2hh
    ciAqYXJndltdOw0Kew0KICBzdHJ1Y3QgdXRtcHggdXRtcF9lbnQ7DQogIGNo
    YXIgKmRhdGU9IiIsKmNoLHVzZXI7DQogIGludCBmLGNvdW50PTAsYWxsPTAs
    ZGVidWc9MCx4PTEsc3VjY2Vzcz0wLG90aGVyX2ZpbGU9MCxoZWxwPTAsZG9u
    ZT0wOw0KDQogIG5sKCk7DQogIHByaW50ZigiIExhc3R4IHYxLjAgICAgV3Jp
    dHRlbiBieSBSeWFuIFd5bGVyIChyeWFud0Bnb29kbmV0LmNvbSkiKTsNCiAg
    bmwoKTsNCiAgbmwoKTsNCiAgaWYoYXJnYz4xKQ0KICAgIGlmKHN0cmNtcChh
    cmd2WzFdLCItaCIpPT0wKSB7DQogICAgICBoZWxwPTE7DQogICAgICBkb25l
    PTE7DQogICAgfQ0KICBpZigoYXJnYyA+IDEpJiYoIWRvbmUpKSB7DQogICAg
    ZG8gew0KICAgICAgaWYoc3RyY21wKGFyZ3ZbeF0sIi1hIik9PTApDQogICAg
    ICAgIGFsbD0xOw0KICAgICAgZWxzZQ0KICAgICAgICBpZihzdHJjbXAoYXJn
    dlt4XSwiLWQiKT09MCkNCiAgICAgICAgICBkZWJ1Zz0xOw0KICAgICAgICBl
    bHNlDQogICAgICAgICAgaWYoc3RyY21wKGFyZ3ZbeF0sIi1mIik9PTApIHsN
    CiAgICAgICAgICAgIG90aGVyX2ZpbGU9MTsNCiAgICAgICAgICAgIGlmKGFy
    Z2M+eCsxKSB7DQogICAgICAgICAgICAgIHgrKzsNCiAgICAgICAgICAgICAg
    aWYoKGY9b3Blbihhcmd2W3hdLE9fUkRXUikpPj0wKQ0KICAgICAgICAgICAg
    ICAgIHN1Y2Nlc3M9MTsNCiAgICAgICAgICAgICAgZWxzZQ0KICAgICAgICAg
    ICAgICAgIHByaW50ZigiICBFcnJvcjogIENoZWNrIGZpbGVuYW1lL3BhdGgg
    Zm9yICclcydcblxuIixhcmd2W3hdKTsNCiAgICAgICAgICAgIH0gZWxzZQ0K
    ICAgICAgICAgICAgICBwcmludGYoIiAgRXJyb3I6ICAtZiBzcGVjaWZpZWQs
    IGJ1dCBubyBmaWxlbmFtZSBmb2xsb3dlZCAtZlxuXG5leGl0aW5nLi4uXG4i
    KTsNCiAgICAgICAgICB9IGVsc2UNCiAgICAgICAgICAgICAgc3RyY3B5KCZ1
    c2VyLGFyZ3ZbeF0pOw0KICAgICAgeCsrOw0KICAgIH0gd2hpbGUoeCA8IGFy
    Z2MpOw0KICB9DQogIGlmKChhcmdjID4gMSkmJighZG9uZSkpIHsNCiAgICBp
    ZihhbGw9PTEpIHsNCiAgICAgIGlmKG90aGVyX2ZpbGU9PTApDQogICAgICAg
    IGlmKChmPW9wZW4oV1RNUCxPX1JEV1IpKT49MCkNCiAgICAgICAgICBzdWNj
    ZXNzPTE7DQogICAgICAgIGVsc2UgDQogICAgICAgICAgcHJpbnRmKCIgIEVy
    cm9yOiAgQ2hlY2sgZmlsZW5hbWUvcGF0aDogICVzXG5cbiIsV1RNUCk7DQog
    ICAgICBpZihzdWNjZXNzPT0xKSB7DQogICAgICAgIHdoaWxlKHJlYWQoZiwm
    dXRtcF9lbnQsc2l6ZW9mKHV0bXBfZW50KSkpDQogICAgICAgICAgaWYoc3Ry
    bmNtcCh1dG1wX2VudC51dF91c2VyLCIuIiwxKSE9MCkgew0KICAgICAgICAg
    ICAgICBpZihjb3VudD09MCkNCiAgICAgICAgICAgICAgICBwcmludGYoIiAg
    VXNlciAgICAgICAgSVAgQWRkcmVzcyAgICAgICAgICh0byBzZWUgdGltZSBz
    cGVjaWZ5IHNwZWNpZmljIHVzZXIpXG4iKTsNCiAgICAgICAgICAgICAgcHJp
    bnRmKCIgICVzICAlc1xuIix1dG1wX2VudC51dF91c2VyLHV0bXBfZW50LnV0
    X2hvc3QpOw0KICAgICAgICAgICAgICBjb3VudCsrOw0KICAgICAgICAgIH0N
    CiAgICAgICAgbmwoKTsNCiAgICAgICAgcHJpbnRmKCJUaGVyZSB3ZXJlICVp
    IHJlY29yZHMgbGlzdGVkIixjb3VudCk7DQogICAgICAgIG5sKCk7DQogICAg
    ICAgIGNsb3NlKGYpOyAgDQogICAgICB9DQogICAgfSBlbHNlIHsNCiAgICAg
    IGlmKGRlYnVnPT0xKSB7DQogICAgICAgIGlmKG90aGVyX2ZpbGU9PTApDQog
    ICAgICAgICAgaWYoKGY9b3BlbihXVE1QLE9fUkRXUikpPj0wKQ0KICAgICAg
    ICAgICAgc3VjY2Vzcz0xOw0KICAgICAgICAgIGVsc2UgDQogICAgICAgICAg
    ICBwcmludGYoIiAgRXJyb3I6ICBDaGVjayBmaWxlbmFtZS9wYXRoOiAgJXNc
    blxuIixXVE1QKTsNCiAgICAgICAgaWYoc3VjY2Vzcz09MSkgew0KICAgICAg
    ICAgIHdoaWxlKHJlYWQoZiwmdXRtcF9lbnQsc2l6ZW9mKHV0bXBfZW50KSkp
    IHsNCiAgICAgICAgICAgICAgaWYoY291bnQ9PTApDQogICAgICAgICAgICAg
    ICAgcHJpbnRmKCIgIFVzZXIgICAgICAgIElQIEFkZHJlc3MgICAgICAgICAo
    dG8gc2VlIHRpbWUgc3BlY2lmeSBzcGVjaWZpYyB1c2VyKVxuIik7DQogICAg
    ICAgICAgICAgIHByaW50ZigiICAlcyAgJXNcbiIsdXRtcF9lbnQudXRfdXNl
    cix1dG1wX2VudC51dF9ob3N0KTsNCiAgICAgICAgICAgICAgY291bnQrKzsN
    CiAgICAgICAgICAgIH0NCiAgICAgICAgICBubCgpOw0KICAgICAgICAgIHBy
    aW50ZigiVGhlcmUgd2VyZSAlaSByZWNvcmRzIGxpc3RlZCIsY291bnQpOw0K
    ICAgICAgICAgIG5sKCk7DQogICAgICAgICAgY2xvc2UoZik7ICANCiAgICAg
    ICAgfQ0KICAgICAgfSBlbHNlIHsNCiAgICAgICAgaWYob3RoZXJfZmlsZT09
    MCkNCiAgICAgICAgICBpZigoZj1vcGVuKFdUTVAsT19SRFdSKSk+PTApDQog
    ICAgICAgICAgICBzdWNjZXNzPTE7DQogICAgICAgICAgZWxzZSANCiAgICAg
    ICAgICAgIHByaW50ZigiICBFcnJvcjogIENoZWNrIGZpbGVuYW1lL3BhdGg6
    ICAlc1xuXG4iLFdUTVApOw0KICAgICAgICBpZihzdWNjZXNzPT0xKSB7DQog
    ICAgICAgICAgd2hpbGUocmVhZChmLCZ1dG1wX2VudCxzaXplb2YodXRtcF9l
    bnQpKSkNCiAgICAgICAgICAgIGlmKCFzdHJjbXAodXRtcF9lbnQudXRfbmFt
    ZSwgJnVzZXIpKSB7ICANCiAgICAgICAgICAgICAgICBpZihjb3VudD09MCkN
    CiAgICAgICAgICAgICAgICAgIHByaW50ZigiICBVc2VyICAgICAgICBJUCBB
    ZGRyZXNzICAgICAgICAgICAgIFRpbWVcbiIpOw0KICAgICAgICAgICAgICAg
    IGRhdGUgPSBjdGltZSgmdXRtcF9lbnQudXRfeHRpbWUpOw0KICAgICAgICAg
    ICAgICAgIGRhdGVbc3RybGVuKGRhdGUpLTFdID0gJ1wwJzsgDQogICAgICAg
    ICAgICAgICAgcHJpbnRmKCIgICVzICAlcyAgJXNcbiIsdXRtcF9lbnQudXRf
    dXNlcix1dG1wX2VudC51dF9ob3N0LGRhdGUpOw0KICAgICAgICAgICAgICAg
    Y291bnQrKzsNCiAgICAgICAgICAgICAgfQ0KICAgICAgICAgIG5sKCk7DQog
    ICAgICAgICAgcHJpbnRmKCJUaGVyZSB3ZXJlICVpIHJlY29yZHMgbGlzdGVk
    Iixjb3VudCk7DQogICAgICAgICAgbmwoKTsNCiAgICAgICAgICBjbG9zZShm
    KTsgIA0KICAgICAgICB9DQogICAgICB9DQogICAgfQ0KICB9IGVsc2Ugew0K
    ICAgIHByaW50ZigiICAgVXNhZ2U6ICVzIDwtaCB8IC1hIHwgLWQgfCBbdXNl
    cm5hbWVdPiA8LWYgW2ZpbGVuYW1lXT4iLGFyZ3ZbMF0pOw0KICAgIG5sKCk7
    DQogICAgcHJpbnRmKCIgT3B0aW9uczogIC1hICAgICBEaXNwbGF5IGFsbCB1
    c2VycyIpOw0KICAgIG5sKCk7DQogICAgcHJpbnRmKCIgICAgICAgICAgIC1k
    ICAgICBEaXNwbGF5IGFsbCBFbnRyeXMiKTsNCiAgICBubCgpOw0KICAgIHBy
    aW50ZigiICAgICAgICAgICB1c2VyICAgRGlzcGxheXMgZW50cmllcyBmb3Ig
    b25seSB0aGF0IHVzZXIiKTsNCiAgICBubCgpOw0KICAgIHByaW50ZigiICAg
    ICAgICAgICAtZiAgICAgU3BlY2lmeSBhIHNwZWNpZmljIHd0bXB4IGZpbGUg
    dG8gdXNlIik7DQogICAgbmwoKTsgDQogICAgcHJpbnRmKCIgICAgICAgICAg
    IC1oICAgICBFeHRlbmRlZCBoZWxwIChleGFtcGxlcykgJWkiLGhlbHApOw0K
    ICAgIG5sKCk7IG5sKCk7DQogICAgaWYoaGVscD09MSkgew0KICAgICAgcHJp
    bnRmKCIgRXhhbXBsZXM6Iik7DQogICAgICBubCgpOw0KICAgICAgcHJpbnRm
    KCIgICAlcyByeWFudyIsYXJndlswXSk7DQogICAgICBubCgpOw0KICAgICAg
    cHJpbnRmKCIgICAgIFNob3dzIGFsbCBsb2dpbnMgZm9yIHJ5YW53Iik7DQog
    ICAgICBubCgpOyBubCgpOw0KICAgICAgcHJpbnRmKCIgICAlcyAtYSIsYXJn
    dlswXSk7DQogICAgICBubCgpOw0KICAgICAgcHJpbnRmKCIgICAgIFNob3dz
    IGFsbCByZWNvcmRzIGluIHd0bXB4IGZpbGUiKTsNCiAgICAgIG5sKCk7IG5s
    KCk7DQogICAgICBwcmludGYoIiAgICVzIC1kIixhcmd2WzBdKTsNCiAgICAg
    IG5sKCk7DQogICAgICBwcmludGYoIiAgICAgU2hvd3MgZXZlbiBNT1JFIHJl
    Y29yZHMgaW4gd3RtcHggZmlsZSIpOw0KICAgICAgbmwoKTsgbmwoKTsNCiAg
    ICAgIHByaW50ZigiICAgJXMgLWYgL3Zhci9hZG0vYmFja3VwL3d0bXAuMSBy
    eWFudyIsYXJndlswXSk7DQogICAgICBubCgpOw0KICAgICAgcHJpbnRmKCIg
    ICAgIFNob3dzIGFsbCBsb2dpbnMgb2YgdXNlciByeWFudyBpbiBmaWxlIC92
    YXIvYWRtL2JhY2t1cC93dG1wLjEiKTsNCiAgICAgIG5sKCk7IG5sKCk7DQog
    ICAgICBwcmludGYoIiAgICVzIC1hIC1mIDxmaWxlbmFtZT4iLGFyZ3ZbMF0p
    Ow0KICAgICAgbmwoKTsNCiAgICAgIHByaW50ZigiICAgICBTaG93cyBhbGwg
    cmVjb3JkcyBpbiA8ZmlsZW5hbWU+Iik7DQogICAgICBubCgpOw0KICAgIH0N
    CiAgfQ0KICBleGl0KDApOw0KfQ0K
    ---559023410-851401618-891254364=:19895--
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:47:32 PDT