Can I find IP of the person who is logging as ROOT (570 Views)
Reply
Advisor
Posts: 28
Registered: ‎03-11-2013
Message 1 of 6 (570 Views)

Can I find IP of the person who is logging as ROOT

[ Edited ]

I have root acess to the server and other persons also do have.

 

We all loggin though our Login Id and Password. No one is using the root LOGIN ID and PASSWORD.

 

But in my logs what i found is some one is logging with the ROOT id, Now what I want is to find its ip.

Means the IP of the person who is logging as root.

 

So can any body tell me is there any way to find out. I know the root PASSWORD but I want to find out the person's ip, who is logging as root.

 

 

Thanks and regard

Ashish

 

 

P.S. This thread has been moved from Servers > General to HP-UX > sysadmin.

-HP Forum Moderator

 

HP Pro
Posts: 1,870
Registered: ‎11-27-2006
Message 2 of 6 (565 Views)

Re: Can I find IP of the person who is logging as ROOT

try using "last" as it shows a listing of the last logged in users and their IP/hostnames. 




__________________________________________________
No support by private messages. Please ask the forum!      I work for HP

If you feel this was helpful please click the KUDOS! thumb below!   
Advisor
Posts: 28
Registered: ‎03-11-2013
Message 3 of 6 (563 Views)

Re: Can I find IP of the person who is logging as ROOT

I am not able to use last command, It is showing following errors.

 

#
# last -R
Invalid record size. Unable to continue ...

 

#
# last
Invalid record size. Unable to continue ...

 

what to do now.

 

 

 

Thanks and regard

Ashish

 

Acclaimed Contributor
Posts: 25,875
Registered: ‎03-06-2006
Message 4 of 6 (552 Views)

Re: Can I find IP of the person who is logging as ROOT

>Invalid record size. Unable to continue ...
>what to do now?

 

What OS version are you using?

Advisor
Posts: 28
Registered: ‎03-11-2013
Message 5 of 6 (544 Views)

Re: Can I find IP of the person who is logging as ROOT

its hp ux 11 iv3
Acclaimed Contributor
Posts: 25,875
Registered: ‎03-06-2006
Message 6 of 6 (538 Views)

Re: Can I find IP of the person who is logging as ROOT

[ Edited ]

You have a corrupt wtmps file.  How much time are you willing to spend to fix it?

See my posts in:

http://h30499.www3.hp.com/t5/System-Administration/decode-contents-of-wtmp-file/m-p/5569517

http://h30499.www3.hp.com/t5/System-Administration-Knowledge/Decoding-contents-of-wtmp-file/ta-p/558...

 

Also, is anyone using su or sudo to switch to root?  There are separate logs for that.

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.