Bug 176494

Summary:	last -i returns strange IP addresses
Product:	[Fedora] Fedora	Reporter:	Mike Jang <michael>
Component:	util-linux	Assignee:	Karel Zak <kzak>
Status:	CLOSED RAWHIDE	QA Contact:	Ben Levenson <benl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5	CC:	notting, sundaram
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-08-10 09:48:50 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	150221

Description Mike Jang 2005-12-23 16:41:26 UTC

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20050920 Firefox/1.0.7

Description of problem:
On my 64-bit system, running FC5 test1, I get a wild variety of IP addresses for logins, per last -i output. Does not happen on my 32-bit system running FC5 test1, or my Ubuntu breezy system, both on the same network.

Version-Release number of selected component (if applicable):
SysVinit-2.85-42

How reproducible:
Always

Steps to Reproduce:
1.last -i
2.Also appears when I run utmpdump /var/log/wtmp
3.
  

Actual Results:  Lots of strange IP addresses, including from impossible locations, e.g. from external networks during the boot and shutdown process. If I were being hacked, I'd think I'd get a similar result on my 32-bit system running FC5 test1.

Expected Results:  IP address output from last -i should be 0.0.0.0 unless I log in from another system.

Additional info:

When I run last -i, I get entries like:

michael  pts/2        254.107.2.0      Fri Dec 16 12:44 - down   (13:23)
michael  pts/1        19.130.3.0       Fri Dec 16 12:41 - down   (13:26)
michael  pts/1        201.242.9.0      Fri Dec 16 12:30 - 12:41  (00:10)
michael  :0           0.0.0.0          Fri Dec 16 12:28 - down   (13:39)
reboot   system boot  120.225.6.0      Fri Dec 16 12:25          (13:42)
reboot   system boot  155.253.0.0      Fri Dec 16 00:54          (01:10)

Seems reminiscient of bug 82540, but I don't see this problem on my other FC5 test1 system running on a 32-bit laptop.

Comment 1 Rahul Sundaram 2006-02-20 10:41:06 UTC


These bugs are being closed since a large number of updates have been released
after the FC5 test1 and test2 releases. Kindly update your system by running yum
update as root user or try out the third and final test version of FC5 being
released in a short while and verify if the bugs are still present on the system
.Reopen or file new bug reports as appropriate after confirming the presence of
this issue. Thanks

Comment 2 Bill Nottingham 2006-08-09 23:54:23 UTC

This isn't actually a last bug; programs are putting junk in the file due to a
32/64-bit problem.

reboot/init is one of them; this is fixed in SysVinit-2.86-9 or later. 

Assigning to util-linux for the other part of the fix.

Comment 3 Karel Zak 2006-08-10 09:48:50 UTC

Thanks. Fixed in util-linux-2.13-0.37 or later.