`last` is a command that shows a listing of the last logged in users.

learn more… | top users | synonyms

1
vote
1answer
19 views

Difference between last and lastlog?

last | grep IPADDRESS doesn't shows any line, but: lastlog | grep IPADDRESS does. Why?
-2
votes
1answer
21 views

How do I get a list of users that are not on the last command? (Not logged in recently)

I need a list of users that I cannot find by using the last command (i.e. they were not logged in recently). Would a temporary file be useful for this?
3
votes
1answer
51 views

Where does 'last' store user hostnames?

I was looking into: 'last -d' command. -d: For non-local logins, Linux stores not only the host name of the remote host but its IP number as well. This option translates the IP number back into a ...
0
votes
0answers
58 views

Seems that my router accessed one of my Linux systems, what does it mean?

I just ran the last command on two of my systems and there are weird entries: user pts/2 dsldevice.lan Sun Dec 28 22:59:35 2014 - Tue Dec 30 00:40:41 2014 (1+01:41) Notice: dsldevice.lan ...
0
votes
0answers
22 views

Show history of computer usage

I know the last command can show me a history of when I last logged in/out, and I also know that I can use /var/log/pm-suspend.log to find out when the computer has awakened from a suspend mode. ...
1
vote
1answer
45 views

Unable to get last connection info for SSH users (locked, no shell, public key) is there an alternative?

I have several remote systems connecting to my server via SSH to establish tunnels. They authenticate using a public key, their user is locked and their shell is set to /usr/sbin/nologin It all ...
0
votes
2answers
77 views

delete multiple users

I am the root user and I am setting up a menu for another user to use. This other user will only get this menu. There are two options that are interlinked: the first option is to search users. The ...
0
votes
1answer
24 views

Does an SFTP login get accounted for with `last`?

The title says it all. At first glance it dodoesn't show, but I also just learned about the existence of last as well.
0
votes
1answer
72 views

why does “last” command show reboots

According its own man page, the last command: shows listing of last logged in users This is exactly what I need. But why does it spam the output and list the reboots as well? I want to see who ...
0
votes
3answers
91 views

last command only shows few days worth of logins

I often use thelast command to check my systems for unauthorized logins, this command: last -Fd gives me the logins where I have remote logins showing with ip. From man last: -F Print full ...
0
votes
1answer
32 views

'last' does not include logs for few last days

When I execute 'last', I do not see logs from past 6 days. What could be the case? Is it possible to clear these logs? I'm on OS X Mavericks.
2
votes
1answer
244 views

Sort the 'last' output by month

I know that the command last | tac is enough, but I want to do it using the sort command. I cannot sort it by column, it always sorts the first one only. Using bash on Arch Linux.
2
votes
0answers
67 views

getting last logins since $time

I want to get last logins from a certain date using last Running last -f /var/log/btmp -t 20140723123000 Always shows my whole lastb log. This: last -t 20140723123000 Shows my whole last log. ...
2
votes
1answer
82 views

'last -d' is REALLY slow

I can run the command last (and last -i) in a fraction of a second, but when I run last -d, according to my tests, it takes a whopping 5 minutes and 22 seconds. Just for reference, this is what ...
1
vote
0answers
54 views

How to get rid of `mosh` spamming `last -f /var/log/wtmp`?

Ever since I've started using mosh, I'm getting way too many entries in my /var/log/wtmp file of last(1) on a Linux box. cnst pts/8 172.56.2x.yz via Mon May 19 08:19 still logged in ...
1
vote
0answers
133 views

how to get user's last login including the year in C [closed]

I'm trying to write a program that can get the user's last login time. Then i want to do something with the data. eg. check which user havent login for 90 days. So I tried using last command. This ...
1
vote
2answers
120 views

Linux Last command weird output? Garbage for IP address

This was a weird output I came across. Running the "last" command gave me this output gryphon pts/0 192.168.0.108 Wed Mar 19 21:04 still logged in gryphon pts/0 s0106d850e695678 ...
2
votes
1answer
450 views

Unknown entries in Kali Linux wtmp log file

I have installed Kali Linux and I found some puzzling entries in wtmp log file. Unknown user logs in for a short while when I boot my computer or switch accounts and most of the time when I shut down. ...
4
votes
2answers
9k views

“Last” command: How to show latest user login?

As I know, the last command shows recent logins by all users. But my PC (CentOS) has been used for roughly a year, and there are many users logged. I tried to used the last command, but it just showed ...
1
vote
2answers
295 views

How to tell the “last” command to read from STDIN?

SERVER:~ # zcat /var/log/wtmp-20130827.gz | last -f - last: -: No such file or directory SERVER:~ # Without uncompressing the wtmp file, how can I see the output of if it with the last command?
2
votes
2answers
67 views

How to detect what is causing entries in the “last” cmd's output? [duplicate]

last ... date { Sun Mar 31 12:00 date | Sun Mar 31 12:00 date { Sun Mar 31 00:00 date ...
2
votes
2answers
2k views

Meanings of the columns in “last” command

As I was investigating a server that is rebooting in a regular fashion, I started looking through the "last" utility but the problem is that I am unable to find what the columns mean exactly. I have, ...
4
votes
1answer
5k views

Can't explain “crash” entries in output of the 'last' command

Last shows "crash" at 12:02 and 14:18, but the system didn't stop working at that time. The reboot at 15:03, on the other hand, was to recover from an actual crash - our system stopped responding at ...
6
votes
1answer
17k views

How to know when and which user logged into the system under Mac OS X? Last is not enough!

In Mac OS X, if I don't touch it for a while, it will lock the screen and one must use password to unlock it, but this kind of log in is not recorded by last command. I want to know if anybody tried ...
2
votes
1answer
186 views

Why does `last` show '{' and '|' in the TTY field?

We recently set up a new FreeBSD 7.2 machine on March 11. When looking at last, we noticed some funny characters for the TTY field. What do these characters mean? Note that at this time, the ...
7
votes
1answer
7k views

Output of the “last” command

Can anybody explain me what is the meaning of the last column of the output of the last command? I'm particularly interested in its meaning with respect to the reboot pseudo-user. reboot system ...