Re: radwtmp

On Sun, 9 Mar 2008, Alan DeKok wrote: David WU wrote: I found that the first character of login in the logout record of each login/logout pair missing, login/logout pair? "radwtmp" stores the list of users currently logged in. So when a user logs out, the first character of

radwtmp

I found that the first character of login in the logout record of each login/logout pair missing, as illustrated by the attached file (logins and host ips changed with an hex editor to anonymize the data). This in contrast to the local wtmp file. I discovered this anomaly when I ran a perl