1. Information about the current logged-in user is recorded in file utmp; ==who command2. Login entry and exit record in document WTMP; ==W command3, the last login file can be viewed with lastlog command;4. messages====== log information from the SyslogNote: Wtmp and utmp files are binary files and they cannot be clipped or merged (using the Cat command) such as the tail command. UserThe information contained in these two files needs to be used by WH
1. Information about the current logged-in user is recorded in file utmp; ==who command2. Login entry and exit record in document WTMP; ==W command3, the last login file can be viewed with lastlog command;4. messages====== log information from the SyslogNote: Wtmp and utmp files are binary files and they cannot be clipped or merged (using the Cat command) such as the tail command. UserThe information contained in these two files needs to be used by WH
The Lastlog file is the information that records the last login for all users.
The algorithm for this file is this:
Log user logon Information size = UID * 256byte
For example, a nfsnobody user on a 64-bit system with a UID of 4294967294 or 2^32-2, which is also the last UID on the system.
So the above algorithm can explain how the file displays the 1.2TB size:
4294967294 * 256 = 1099511627264 bytes from the above algorithm can also see that 256
Using ** Neverloggedin ** xfs ** Neverloggedin ** haldaemon ** Using ** avahi-autoipd ** Using ** sabayon ** Using ** nagios ** Neverloggedin ** squid * ..
Lastlog
Avahi ** Never logged in **Xfs ** Never logged in **Haldaemon ** Never logged in **Avahi-autoipd ** Never logged in **Sabayon ** Never logged in **Nagios ** Never logged in **Squid ** Never logged in **Mysql ** Never logged in **Gestation ** Never logged in **Resin ** Never logged in **Abc
The lastlog file is queried every time a user logs on. You can use the lastlog command to check the last logon time of a specific user and format the last logon log/var/log/lastlog.
It displays the logon name, port number (tty), and last logon time according to the UID sorting. If a user has Never logged on, lastlog di
Article Title: The reason why Lastlog files keep getting bigger. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
The Lastlog file records the last logon information of all users. The algorithm of this file is as follows:
Logged user login information size = UID * 256
protected] backup]#Lastlog: Displays information about the last successful login for all users[Email protected] backup]# lastlog-u HadoopUsername Port from LatestHadoop **never logged in**[Email protected] backup]#[Email protected] backup]# LastlogUsername Port from LatestRoot PTS/1 10.4.10.226 Thu June 25 14:24:23-0700 2015Bin **never Logged in**Daemon **never logged in**ADM **never logged in**LP **never
Connection only onetty#: Virtual Terminal ("the") Local connection for virtual machinesttys#: Serial terminal #表示第几个串行终端连接pts/#: Pseudo terminal #表示第几个伪终端登录4, L a ST: display/var/log/wtmp file showing user login history and System restart history - N #: Show information about recent # times5, Lastb: /var/log/btmp file that displays user error login attempts-N #: Displays information about recent # times6, Lastlog: Displays the last successful logi
Lastlog
Avahi ** Never logged in **Xfs ** Never logged in **Haldaemon ** Never logged in **Avahi-autoipd ** Never logged in **Sabayon ** Never logged in **Nagios ** Never logged in **Squid ** Never logged in **Mysql ** Never logged in **Gestation ** Never logged in **Resin ** Never logged in **Abc pts/1 Listen 10.30.23 Thu May 19 14:22:15 + 0800 2012Start ** Never logged in **Tom pts/0 Route 10.30.23 Tue Jun 21 16:33:18 + 0800 2012Jerry ** Never logge
It displays the login name, port number (TTY), and last logon time, sorted by UID. If a user has never logged in, Lastlog displays **never logged**. Note that you need to run the command as root, for example:
The code is as follows
Copy Code
Rong 5 202.38.64.187 Fri Aug 18 15:57:01 +0800 2000DBB **never logged in**Xinchen **never logged in**pb9511 **never logged in**Xchen 0 202.38.64.190 Sun Aug 13 10:01:22 +0800 2000
Tags: img-o vpd stl Text Specify last Description listlast 显示文件的类型Syntax format: Last ' option ' last [option]Note: There must be at least one space between each element in the file command and in the following optionsOption Description:
parameter Options
Explanatory notes
-num,-n num
Specify the number of rows to display the result
Case one:Show User Recent Login listlastlog 显示所有用户的最近登录记录Case one:Show most recent login records for all
Tags: w who lastlogW who lastlog command example w view current logged in user and current operation[[emailprotected] ~]# w 22:52:39 up 133 days, 16:47, 8 users, load average: 0.77, 0.31, 0.32USER TTY FROM [emailprotected] IDLE JCPU PCPU WHATroot pts/0 remotepc.cedarhd 22:08 32:22 0.07s 0.04s vi applicationContext.xmlroot pts/2 10.3.244.3 22:47 0.00s 0.02s 0.00s wroot tty1 :0
W who whoami last Lastb lastlog basename sleep hostname mail################################################W.H.O.WhoAmILast: Displays the/var/log/wtmp file, showing the user login history and System restart historyLastb:/var/log/btmp file that displays user error attempts to log onLastlog: Users who have never logged in################################################BaseName$: Script path and name when executing script################################
Because of the wide range of systems involved, it is impossible to clarify the logs of all UNIX-class systems, but most of them are similar. Below I will only use the common SunOS RedHat for introduction. for other systems, see related information.
UNIX system log files are usually stored in the "/var/log and/var/adm" directory. Generally, you can view syslog. conf to check the log configuration, for example, CAT/etc/syslog. conf.
Under/var/log and/var/adm of SunOS, there is also a link with/us
provide command usage statistics for basic services in the system.
Error Log -- executed by syslogd (8. Various system Daemon Processes, user programs, and kernels report noteworthy events to files/var/log/messages through syslog (3. In addition, many UNIX programs create logs. Servers that provide network services such as HTTP and FTP also maintain detailed logs.
Common log files are as follows:
Access-log records HTTP/web transmission
Acct/pacct record user commands
Aculog records MO
terminates, each process writes a record to the process Statistics file (pacct or acct. Process statistics are used to provide command usage statistics for basic services in the system.
Error Log -- executed by syslogd (8. Various system Daemon Processes, user programs, and kernels report noteworthy events to files/var/log/messages through syslog (3. In addition, many UNIX programs create logs. Servers that provide network services such as HTTP and FTP also maintain detailed logs.
Common
programs, and kernels report noteworthy events to files/var/log/messages through Syslog (3. In addition, many UNIX programs create logs. Servers that provide network services such as HTTP and FTP also maintain detailed logs.
Common log files are as follows:
Access-log records HTTP/web transmission
Acct/pacct record user commands
Aculog records modem activities
Btmp record failure record
Lastlog records the last successful logon events and the last un
. This is the ACPI message process. A service program used to control, obtain, and manage the state of ACPI.9)/var/run/utmp records the user who is now logged in;/var/log/lastlog record each user's last login information;One)/var/log/btmp log the wrong login attempt;/VAR/LOG/DMESG kernel log;/var/log/cpus CPU processing information;/var/log/syslog Event record monitoring program log;/var/log/auth.log user authentication log;()/var/log/daemon.log syste
terminates, each process writes a record to the process Statistics file (pacct or acct. Process statistics are used to provide command usage statistics for basic services in the system. Error Log -- executed by syslogd (8. Various system Daemon Processes, user programs, and kernels report noteworthy events to files/var/log/messages through syslog (3. In addition, many UNIX programs create logs. Servers that provide network services such as HTTP and FTP also maintain detailed logs. Common log fi
Processes, user programs, and kernels report noteworthy events to files/var/log/messages through syslog (3. In addition, many UNIX programs create logs. Servers that provide network services such as HTTP and FTP also maintain detailed logs.
Common log files are as follows:
Access-log records HTTP/web transmission
Acct/pacct record user commands
Aculog records MODEM activities
Btmp record failure record
Lastlog records the last successful logon events
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.