## NAME

utmpdump - dump UTMP and WTMP files in raw format

## SYNOPSIS

utmpdump [options]

## DESCRIPTION

utmpdump is a simple program to dump UTMP and WTMP files in raw format, so they can be examined. utmpdump reads from stdin unless a filename is passed.

## OPTIONS

\fB-f\fR, \fB--follow\fP

Output appended data as the file grows.

\fB-o\fR, \fB--output\fP \fIfile\fR

Write command output to file instead of standard output.

\fB-r\fR, \fB--reverse\fP

Undump, write back edited login information into the utmp or wtmp files.

\fB-h\fR, \fB--help\fP

Display help text and exit.

\fB-V\fR, \fB--version\fP

Display version information and exit.

## NOTES

utmpdump can be useful in cases of corrupted utmp or wtmp entries. It can dump out utmp/wtmp to an ASCII file, which can then be edited to remove bogus entries, and reintegrated using:

utmpdump -r < ascii_file > wtmp

But be warned, utmpdump was written for debugging purposes only.

## BUGS

You may not use the -r option, as the format for the utmp/wtmp files strongly depends on the input format. This tool was not written for normal use, but for debugging only.

## AUTHOR

Michael Krapp

## SEE ALSO

last (1), w (1), who (1), utmp (5)

## AVAILABILITY

The utmpdump command is part of the util-linux package and is available from

Linux Kernel Archive