`last` is a command that shows a listing of the last logged in users.

learn more… | top users | synonyms

1
vote
1answer
88 views

Difference between last and lastlog?

last | grep IPADDRESS doesn't shows any line, but: lastlog | grep IPADDRESS does. Why?
-2
votes
1answer
26 views

How do I get a list of users that are not on the last command? (Not logged in recently)

I need a list of users that I cannot find by using the last command (i.e. they were not logged in recently). Would a temporary file be useful for this?
3
votes
1answer
57 views

Where does 'last' store user hostnames?

I was looking into: 'last -d' command. -d: For non-local logins, Linux stores not only the host name of the remote host but its IP number as well. This option translates the IP number back into a ...
0
votes
0answers
65 views

Seems that my router accessed one of my Linux systems, what does it mean?

I just ran the last command on two of my systems and there are weird entries: user pts/2 dsldevice.lan Sun Dec 28 22:59:35 2014 - Tue Dec 30 00:40:41 2014 (1+01:41) Notice: dsldevice.lan ...
0
votes
0answers
33 views

Show history of computer usage

I know the last command can show me a history of when I last logged in/out, and I also know that I can use /var/log/pm-suspend.log to find out when the computer has awakened from a suspend mode. ...
1
vote
1answer
62 views

Unable to get last connection info for SSH users (locked, no shell, public key) is there an alternative?

I have several remote systems connecting to my server via SSH to establish tunnels. They authenticate using a public key, their user is locked and their shell is set to /usr/sbin/nologin It all ...
0
votes
2answers
143 views

delete multiple users

I am the root user and I am setting up a menu for another user to use. This other user will only get this menu. There are two options that are interlinked: the first option is to search users. The ...
0
votes
1answer
35 views

Does an SFTP login get accounted for with `last`?

The title says it all. At first glance it dodoesn't show, but I also just learned about the existence of last as well.
0
votes
1answer
97 views

why does “last” command show reboots

According its own man page, the last command: shows listing of last logged in users This is exactly what I need. But why does it spam the output and list the reboots as well? I want to see who ...
0
votes
3answers
136 views

last command only shows few days worth of logins

I often use thelast command to check my systems for unauthorized logins, this command: last -Fd gives me the logins where I have remote logins showing with ip. From man last: -F Print full ...
0
votes
1answer
37 views

'last' does not include logs for few last days

When I execute 'last', I do not see logs from past 6 days. What could be the case? Is it possible to clear these logs? I'm on OS X Mavericks.
2
votes
1answer
308 views

Sort the 'last' output by month

I know that the command last | tac is enough, but I want to do it using the sort command. I cannot sort it by column, it always sorts the first one only. Using bash on Arch Linux.
2
votes
0answers
81 views

getting last logins since $time

I want to get last logins from a certain date using last Running last -f /var/log/btmp -t 20140723123000 Always shows my whole lastb log. This: last -t 20140723123000 Shows my whole last log. ...
2
votes
1answer
86 views

'last -d' is REALLY slow

I can run the command last (and last -i) in a fraction of a second, but when I run last -d, according to my tests, it takes a whopping 5 minutes and 22 seconds. Just for reference, this is what ...
1
vote
0answers
60 views

How to get rid of `mosh` spamming `last -f /var/log/wtmp`?

Ever since I've started using mosh, I'm getting way too many entries in my /var/log/wtmp file of last(1) on a Linux box. cnst pts/8 172.56.2x.yz via Mon May 19 08:19 still logged in ...
1
vote
2answers
137 views

Linux Last command weird output? Garbage for IP address

This was a weird output I came across. Running the "last" command gave me this output gryphon pts/0 192.168.0.108 Wed Mar 19 21:04 still logged in gryphon pts/0 s0106d850e695678 ...
2
votes
1answer
576 views

Unknown entries in Kali Linux wtmp log file

I have installed Kali Linux and I found some puzzling entries in wtmp log file. Unknown user logs in for a short while when I boot my computer or switch accounts and most of the time when I shut down. ...
4
votes
2answers
13k views

“Last” command: How to show latest user login?

As I know, the last command shows recent logins by all users. But my PC (CentOS) has been used for roughly a year, and there are many users logged. I tried to used the last command, but it just showed ...
1
vote
2answers
338 views

How to tell the “last” command to read from STDIN?

SERVER:~ # zcat /var/log/wtmp-20130827.gz | last -f - last: -: No such file or directory SERVER:~ # Without uncompressing the wtmp file, how can I see the output of if it with the last command?
2
votes
2answers
69 views

How to detect what is causing entries in the “last” cmd's output? [duplicate]

last ... date { Sun Mar 31 12:00 date | Sun Mar 31 12:00 date { Sun Mar 31 00:00 date ...
2
votes
3answers
2k views

Meanings of the columns in “last” command

As I was investigating a server that is rebooting in a regular fashion, I started looking through the "last" utility but the problem is that I am unable to find what the columns mean exactly. I have, ...
4
votes
1answer
6k views

Can't explain “crash” entries in output of the 'last' command

Last shows "crash" at 12:02 and 14:18, but the system didn't stop working at that time. The reboot at 15:03, on the other hand, was to recover from an actual crash - our system stopped responding at ...
6
votes
2answers
20k views

How to know when and which user logged into the system under Mac OS X? Last is not enough!

In Mac OS X, if I don't touch it for a while, it will lock the screen and one must use password to unlock it, but this kind of log in is not recorded by last command. I want to know if anybody tried ...
2
votes
1answer
188 views

Why does `last` show '{' and '|' in the TTY field?

We recently set up a new FreeBSD 7.2 machine on March 11. When looking at last, we noticed some funny characters for the TTY field. What do these characters mean? Note that at this time, the ...
9
votes
1answer
8k views

Output of the “last” command

Can anybody explain me what is the meaning of the last column of the output of the last command? I'm particularly interested in its meaning with respect to the reboot pseudo-user. reboot system ...