I am trying to compare the output of the
btmp file and
who -a commands.
I don't know why, but
btmp file currently is not showing the username but its showing
UNKNOWN in the username field. I am (username:debian) logged in that session.
Please observe the output below:
virt00# who -a system boot 2016-03-06 19:36 run-level 5 2016-03-06 19:36 debian - tty1 2016-03-06 19:36 00:33 1006 debian + pts/0 2016-03-06 19:43 . 1037 (192.168.56.1) virt00# last -f /var/log/btmp | grep still UNKNOWN tty1 Sat Feb 20 16:24 still logged in virt00#
Could you please explain why is there adifference between these two and why I have logged in via SSH and there is one more session running at VM?