I have the following two lines in my daily cron script to trim wtmp... # truncate wtmp (/bin/dd if=/etc/wtmp of=/tmp/wtmp$$ bs=36 count=1 && cp /tmp/wtmp$$ /etc/wtmp && /bin/rm /tmp/wtmp$$) >/dev/null 2>&1 -- Stu Heiss - gargoyle.uchicago.edu!jpusa1.uucp!stu, stu at jpusa1.chi.il.us