Questions tagged [wtmp]

The tag has no usage guidance, but it has a tag wiki.

Filter by
Sorted by
Tagged with
0
votes
0answers
27 views

Output of last is missing “display” column

I have a script parsing the output of last on several OpenSuse Leap machines. Everything is right except on one, and the reason is that on that machine the output is missing the column where the ...
0
votes
0answers
68 views

User Lastlog login datetime did not update

I use lastlog to check latest login datetime. Here are steps I use to update my latest login datetime. 1) Try to Login to that user sudo su userA 2) Exit that user and login to root then check ...
1
vote
2answers
428 views

Does utmp log contain 'logout' information?

I have a test yesterday. A question is Choose the one that is wrong about log files. utmp contains login and logout information of the users who are currently logged onto the system ...
6
votes
2answers
510 views

How to run fake-hwclock before /var/log/wtmp is updated?

I have a raspberry pi and every reboot I see this output in last: root@RaspberryPi:~# last | grep boot reboot system boot 4.4.0-1055-raspi Thu Jan 1 01:00 still running reboot system boot 4....
4
votes
1answer
1k views

utmp, wtmp and btmp: what is the 'tmp'

From the earlier question: why are utmp, wtmp and btmp called as they are? I would like to now what the 'tmp' part is. Is it 'temp/temporary'. As you can see from the earlier question, that part ...
1
vote
0answers
198 views

Changing default log dir of btmp and wtmp

I've mounted my external drive which serves as different log dir. Everything is configured to write to my external location named /var/log_external, and I am wondering, is possible to change default ...
0
votes
3answers
102 views

Count unique users in wtmp file

I am struggling to count the unique users in the wtmp file. Here is what I have so far: uniqueUsers=$(last | uniq -c | wc -l) echo "There were '$uniqueUsers' unique users logged on" Any help is ...
0
votes
1answer
358 views

The last log for reboot appeared twice

Does anyone know what's the meaning of my last command? reboot system boot 2.6.32-431.11.2. Sat May 28 15:06 - 05:01 (1+13:54) reboot system boot 2.6.32-431.11.2. Sat May 28 05:03 - 05:01 (1+23:...
0
votes
1answer
99 views

Which software/commands can I use to delete certain IP from wtmp, btmp, lastlog?

If my aim is to delete IP 1.2.3.4 from: /var/log/wtmp, /var/log/btmp, /var/log/lastlog Which commands can I use on CentOS 6.7 64bit Linux? I see I can't delete it using sed as it is some binary ...
1
vote
3answers
349 views

Garbage hex bytes in wtmp file

I have been trying to extract the boot and login history for a test PC running RHEL 5.8 with some kernel updates. I started by using last -f /var/log/wtmp, and noticed some strange results. Further ...
4
votes
1answer
153 views

How to get rid of `mosh` spamming `last -f /var/log/wtmp`?

Ever since I've started using mosh, I'm getting way too many entries in my /var/log/wtmp file of last(1) on a Linux box. cnst pts/8 172.56.2x.yz via Mon May 19 08:19 still logged in ...