Can I find IP of the person who is logging as ROOT (488 Views)
Reply
Advisor
expertone
Posts: 28
Registered: ‎03-11-2013
Message 1 of 6 (488 Views)

Can I find IP of the person who is logging as ROOT

[ Edited ]

I have root acess to the server and other persons also do have.

 

We all loggin though our Login Id and Password. No one is using the root LOGIN ID and PASSWORD.

 

But in my logs what i found is some one is logging with the ROOT id, Now what I want is to find its ip.

Means the IP of the person who is logging as root.

 

So can any body tell me is there any way to find out. I know the root PASSWORD but I want to find out the person's ip, who is logging as root.

 

 

Thanks and regard

Ashish

 

 

P.S. This thread has been moved from Servers > General to HP-UX > sysadmin.

-HP Forum Moderator

 

Honored Contributor
Jimmy Vance
Posts: 1,576
Registered: ‎11-27-2006
Message 2 of 6 (483 Views)

Re: Can I find IP of the person who is logging as ROOT

try using "last" as it shows a listing of the last logged in users and their IP/hostnames. 

Advisor
expertone
Posts: 28
Registered: ‎03-11-2013
Message 3 of 6 (481 Views)

Re: Can I find IP of the person who is logging as ROOT

I am not able to use last command, It is showing following errors.

 

#
# last -R
Invalid record size. Unable to continue ...

 

#
# last
Invalid record size. Unable to continue ...

 

what to do now.

 

 

 

Thanks and regard

Ashish

 

Acclaimed Contributor
Dennis Handly
Posts: 25,303
Registered: ‎03-06-2006
Message 4 of 6 (470 Views)

Re: Can I find IP of the person who is logging as ROOT

>Invalid record size. Unable to continue ...
>what to do now?

 

What OS version are you using?

Advisor
expertone
Posts: 28
Registered: ‎03-11-2013
Message 5 of 6 (462 Views)

Re: Can I find IP of the person who is logging as ROOT

its hp ux 11 iv3
Acclaimed Contributor
Dennis Handly
Posts: 25,303
Registered: ‎03-06-2006
Message 6 of 6 (456 Views)

Re: Can I find IP of the person who is logging as ROOT

[ Edited ]

You have a corrupt wtmps file.  How much time are you willing to spend to fix it?

See my posts in:

http://h30499.www3.hp.com/t5/System-Administration/decode-contents-of-wtmp-file/m-p/5569517

http://h30499.www3.hp.com/t5/System-Administration-Knowledge/Decoding-contents-of-wtmp-file/ta-p/558...

 

Also, is anyone using su or sudo to switch to root?  There are separate logs for that.

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.