Hello there, you could consider pointing out, in the manual page who(1), that the invocations $ who $ who /var/run/utmp do not produce identical output: $ who mats tty1 2011-11-28 22:32 mats pts/0 2011-11-28 22:36 (:0) $ who /var/run/utmp mats tty1 2011-11-28 22:32 mats pts/0 2011-11-28 22:36 (:0) mats pts/2 2011-11-28 22:38 (:0) $ who -u /var/run/utmp mats tty1 2011-11-28 22:32 02:45 3209 mats pts/0 2011-11-28 22:36 00:07 3488 (:0) mats pts/2 2011-11-28 22:38 . 0 (:0) Due to irregular implementations of UTMP access in different terminal emulators (such as neglect to include PID), the two calls /* coreutils/src/who.c */ who (UTMP_FILE, READ_UTMP_CHECK_PIDS); /* who */ who (argv[optintd], 0); /* who <utmp file> */ are responsible for the undocumented difference. Best regards, Mats Erik Andersson, DM ----- End forwarded message -----