`last` is a command that shows a listing of the last logged in users.

learn more… | top users | synonyms

0
votes
1answer
16 views

Does an SFTP login get accounted for with `last`?

The title says it all. At first glance it dodoesn't show, but I also just learned about the existence of last as well.
0
votes
1answer
33 views

why does “last” command show reboots

According its own man page, the last command: shows listing of last logged in users This is exactly what I need. But why does it spam the output and list the reboots as well? I want to see who ...
0
votes
3answers
50 views

last command only shows few days worth of logins

I often use thelast command to check my systems for unauthorized logins, this command: last -Fd gives me the logins where I have remote logins showing with ip. From man last: -F Print full ...
0
votes
1answer
23 views

'last' does not include logs for few last days

When I execute 'last', I do not see logs from past 6 days. What could be the case? Is it possible to clear these logs? I'm on OS X Mavericks.
2
votes
1answer
146 views

Sort the 'last' output by month

I know that the command last | tac is enough, but I want to do it using the sort command. I cannot sort it by column, it always sorts the first one only. Using bash on Arch Linux.
2
votes
0answers
53 views

getting last logins since $time

I want to get last logins from a certain date using last Running last -f /var/log/btmp -t 20140723123000 Always shows my whole lastb log. This: last -t 20140723123000 Shows my whole last log. ...
2
votes
1answer
69 views

'last -d' is REALLY slow

I can run the command last (and last -i) in a fraction of a second, but when I run last -d, according to my tests, it takes a whopping 5 minutes and 22 seconds. Just for reference, this is what ...
1
vote
0answers
46 views

How to get rid of `mosh` spamming `last -f /var/log/wtmp`?

Ever since I've started using mosh, I'm getting way too many entries in my /var/log/wtmp file of last(1) on a Linux box. cnst pts/8 172.56.2x.yz via Mon May 19 08:19 still logged in ...
1
vote
0answers
104 views

how to get user's last login including the year in C [closed]

I'm trying to write a program that can get the user's last login time. Then i want to do something with the data. eg. check which user havent login for 90 days. So I tried using last command. This ...
1
vote
2answers
91 views

Linux Last command weird output? Garbage for IP address

This was a weird output I came across. Running the "last" command gave me this output gryphon pts/0 192.168.0.108 Wed Mar 19 21:04 still logged in gryphon pts/0 s0106d850e695678 ...
2
votes
1answer
291 views

Unknown entries in Kali Linux wtmp log file

I have installed Kali Linux and I found some puzzling entries in wtmp log file. Unknown user logs in for a short while when I boot my computer or switch accounts and most of the time when I shut down. ...
3
votes
2answers
4k views

“Last” command: How to show latest user login?

As I know, the last command shows recent logins by all users. But my PC (CentOS) has been used for roughly a year, and there are many users logged. I tried to used the last command, but it just showed ...
1
vote
2answers
141 views

Wrong number of logged in users using “w”

There was a temporary network glitch and all user terminal ssh sessions were broken. Upon logging in to the CentOS server again and running the "w" command lists a higher number of users logged in ...
1
vote
2answers
206 views

How to tell the “last” command to read from STDIN?

SERVER:~ # zcat /var/log/wtmp-20130827.gz | last -f - last: -: No such file or directory SERVER:~ # Without uncompressing the wtmp file, how can I see the output of if it with the last command?
2
votes
2answers
64 views

How to detect what is causing entries in the “last” cmd's output? [duplicate]

last ... date { Sun Mar 31 12:00 date | Sun Mar 31 12:00 date { Sun Mar 31 00:00 date ...
2
votes
2answers
1k views

Meanings of the columns in “last” command

As I was investigating a server that is rebooting in a regular fashion, I started looking through the "last" utility but the problem is that I am unable to find what the columns mean exactly. I have, ...
4
votes
1answer
5k views

Can't explain “crash” entries in output of the 'last' command

Last shows "crash" at 12:02 and 14:18, but the system didn't stop working at that time. The reboot at 15:03, on the other hand, was to recover from an actual crash - our system stopped responding at ...
4
votes
1answer
15k views

How to know when and which user logged into the system under Mac OS X? Last is not enough!

In Mac OS X, if I don't touch it for a while, it will lock the screen and one must use password to unlock it, but this kind of log in is not recorded by last command. I want to know if anybody tried ...
2
votes
1answer
184 views

Why does `last` show '{' and '|' in the TTY field?

We recently set up a new FreeBSD 7.2 machine on March 11. When looking at last, we noticed some funny characters for the TTY field. What do these characters mean? Note that at this time, the ...
6
votes
1answer
6k views

Output of the “last” command

Can anybody explain me what is the meaning of the last column of the output of the last command? I'm particularly interested in its meaning with respect to the reboot pseudo-user. reboot system ...