07-22-2008
you can use wtmp & utmp / implementation of who.
9 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
How can i check to see if a user is logged on to the network? (1 Reply)
Discussion started by: provo
1 Replies
2. UNIX for Dummies Questions & Answers
being ordinary user (not having any administrative rights) can avail myself a facility to know who logged and logged out with their timings get popped onto my terminal as if it get echo 'ed... (3 Replies)
Discussion started by: vkandati
3 Replies
3. Shell Programming and Scripting
Hi
how can I know the details of when valid system users last logged on?
thanks (1 Reply)
Discussion started by: nokia1100
1 Replies
4. Shell Programming and Scripting
Working in AIX (so no date -d)
How can i display all the users who have not logged in for more than 40 days?
A small quick script would be usefull, my scripts are always taking to long to execute, even before they are finished.
Many thanks! (5 Replies)
Discussion started by: ughosting
5 Replies
5. Post Here to Contact Site Administrators and Moderators
how to find out users who logged out within 5 minutes (1 Reply)
Discussion started by: roshni
1 Replies
6. UNIX for Advanced & Expert Users
Hi all,
Say my login user id is "t007" and I login into the unix server first using my id and password and then I used to use "su" command to switch the user using root user id and password. Now, how the third person will come to know who has logged in as a first user ?
As:
Login: t007... (2 Replies)
Discussion started by: varungupta
2 Replies
7. Shell Programming and Scripting
I have a situation where I have to capture information of all users who log out, along with the terminal info(tty command).
For example, I may have logged in with /dev/pts/2 as well as /dev/pts4.
Now, when I log out of the session with /dev/pts/2, I need that to be sent in an email to a... (1 Reply)
Discussion started by: ggayathri
1 Replies
8. Shell Programming and Scripting
Hi friends
I want to get a list of users who have logged in before 10 'o clock in the morning on a given date .
I tried with who and last commands but last gives only the last login time
How do i find who logged before 10 'o clock
Thanks (3 Replies)
Discussion started by: ultimatix
3 Replies
9. Shell Programming and Scripting
hi!
How can I find into:
/var/log/messages.4
/var/log/messages.3
/var/log/messages.2
/var/log/messages.1
/var/log/messages
The last user do a login? (for example user1)
My idea is to search by the pattern "Accepted password for" buy I necessary search into all files first and in the... (2 Replies)
Discussion started by: guif
2 Replies
LEARN ABOUT OPENDARWIN
ipl
IPL(4) Kernel Interfaces Manual IPL(4)
NAME
ipl - IP packet log device
DESCRIPTION
The ipl pseudo device's purpose is to provide an easy way to gather packet headers of packets you wish to log. If a packet header is to be
logged, the entire header is logged (including any IP options - TCP/UDP options are not included when it calculates header size) or not at
all. The packet contents is also logged after the header.
Prepending every packet header logged is a structure containing information relevant to the packet following and why it was logged. The
structure's format is as follows:
struct ipl_ci {
u_long sec; /* time when the packet was logged */
u_long usec;
u_long plen; /* length of packet data logged */
u_short hlen; /* length of headers logged */
u_short rule; /* rule number (for log ...) or 0 if result = log */
u_long flags:24; /* XXX FIXME do we care about the extra bytes? */
#if (defined(OpenBSD) && (OpenBSD <= 1991011) && (OpenBSD >= 199606))
u_long filler:8; /* XXX FIXME do we care? */
u_char ifname[IFNAMSIZ];
#else
u_long unit:8;
u_char ifname[4];
#endif
};
In the case of the header causing the buffer to finish on a non-32bit
boundary, padding will be `appended' to ensure that the next log entry
is aligned to a 32bit boundary.
If the packet contents is more then 128 bytes, then only 128 bytes of the
packet contents is logged. Should the packet contents finish on a non-32bit
boundary, then the last few bytes are not logged to ensure the log entry
is aligned to a 32bit boundary.
ipl is a read-only (sequential) character pseudo-device.
The ioctls which are loaded with this device can be found under ipf(4).
The only ioctl which is used for logging and doesn't affect the filter is:
ioctl(fd, SIOCIPFFB, int *)
This ioctl flushes the log buffer and returns the number of bytes flushed.
There is currently no support for non-blocking IO with this device, meaning all read operations should be considered blocking in nature (if
there is no data to read, it will sleep until some is made available).
SEE ALSO
ipf(4)
BUGS
Packet headers are dropped when the internal buffer (static size) fills.
FILES
/dev/ipl0
IPL(4)