As an aside I removed the wtmp patch from pppd to enable utmp entries of ppp users. Why is this disabled by default? I would expect that when you rotate the wtmp file each month you would want the users who are "still logged in" to be transfered into the new wtmp file. I would guess that the best way to do this is to effectively log them out of the old wtmp.1 and log them back into the new wtmp file. This is very important for accounting purposes. I would like to know your thoughts on this issue. Thanks Grahame Jordan
Users know that the user login record (wtmp) gets rotated monthly. the "last" command can take a file to examine on the command line, so running last -f /var/log/wtmp.1 is possible to get around the issue you have raised.