The last(1) command reads wtmp. If you want super-details, you can get the source code for last(1) and examine the format details. If you want to read wtmp in a standard way, just use <B>last</B>.
Also, you can do a man on both <B>last</B> and <B>wmtp</B> to get high level, general details.
Quote:
Last looks back in the wtmp file which records all logins and logouts for information about a user, a teletype or any group of users and teletypes. Arguments specify names of users or teletypes of interest. If multiple arguments are given, the information which applies to any of the arguments is printed. For example ``last root console'' would list all of root's sessions as well as all sessions on the console terminal. Last displays the sessions of the specified users and teletypes, most recent first, indicating the times at which the session began, the duration of the session, and the teletype which the session cut short by a reboot, last so indicates.
The pseudo-user reboot logs in at reboots of the system.
Last with no arguments displays a record of all logins and logouts, in reverse order.
If last is interrupted, it indicates how far the search has progressed in wtmp. If interrupted with a quit signal last indicates how far the search has progressed so far, and the search continues.
|
[Edited by Neo on 12-13-2000 at 02:33 AM]
More UNIX and Linux Forum Topics You Might Find Helpful
Powered by 
12-13-2000
Linear Mode
