Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations MikeeOK on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Login Monitoring
- Thread starter sjsp
- Start date
the "last" command will show you who logged in, when, what port/IP address and when they logged out. This reads the /var/adm/wtmp file. So if you (or cron) clears this file, you will not be able to use the last functionality.
# last | more
crowe
# last | more
crowe
Crowe's comments are absolutely correct ... you can
also use the "lastb" command to check when someone
attempts to login as another user (or root) but does
not use the correct password.
This data file is also stored in /var/adm as btmp.
Pickels
also use the "lastb" command to check when someone
attempts to login as another user (or root) but does
not use the correct password.
This data file is also stored in /var/adm as btmp.
Pickels
- Status
Similar threads
- Locked
- Question