Can I find IP of the person who is logging as ROOT (193 Views)
Reply
Advisor
expertone
Posts: 28
Registered: ‎03-11-2013
Message 1 of 6 (193 Views)

Can I find IP of the person who is logging as ROOT

[ Edited ]

I have root acess to the server and other persons also do have.

 

We all loggin though our Login Id and Password. No one is using the root LOGIN ID and PASSWORD.

 

But in my logs what i found is some one is logging with the ROOT id, Now what I want is to find its ip.

Means the IP of the person who is logging as root.

 

So can any body tell me is there any way to find out. I know the root PASSWORD but I want to find out the person's ip, who is logging as root.

 

 

Thanks and regard

Ashish

 

 

P.S. This thread has been moved from Servers > General to HP-UX > sysadmin.

-HP Forum Moderator

 

Please use plain text.
Honored Contributor
Jimmy Vance
Posts: 1,451
Registered: ‎11-27-2006
Message 2 of 6 (188 Views)

Re: Can I find IP of the person who is logging as ROOT

try using "last" as it shows a listing of the last logged in users and their IP/hostnames. 

Please use plain text.
Advisor
expertone
Posts: 28
Registered: ‎03-11-2013
Message 3 of 6 (186 Views)

Re: Can I find IP of the person who is logging as ROOT

I am not able to use last command, It is showing following errors.

 

#
# last -R
Invalid record size. Unable to continue ...

 

#
# last
Invalid record size. Unable to continue ...

 

what to do now.

 

 

 

Thanks and regard

Ashish

 

Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,746
Registered: ‎03-06-2006
Message 4 of 6 (175 Views)

Re: Can I find IP of the person who is logging as ROOT

>Invalid record size. Unable to continue ...
>what to do now?

 

What OS version are you using?

Please use plain text.
Advisor
expertone
Posts: 28
Registered: ‎03-11-2013
Message 5 of 6 (167 Views)

Re: Can I find IP of the person who is logging as ROOT

its hp ux 11 iv3
Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,746
Registered: ‎03-06-2006
Message 6 of 6 (161 Views)

Re: Can I find IP of the person who is logging as ROOT

[ Edited ]

You have a corrupt wtmps file.  How much time are you willing to spend to fix it?

See my posts in:

http://h30499.www3.hp.com/t5/System-Administration/decode-contents-of-wtmp-file/m-p/5569517

http://h30499.www3.hp.com/t5/System-Administration-Knowledge/Decoding-contents-of-wtmp-file/ta-p/558...

 

Also, is anyone using su or sudo to switch to root?  There are separate logs for that.

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation