How do I review the data in /var/adm/wtmp?

[David Heard]

How do I review the data in /var/adm/wtmp?

[Gerald Taylor · Accepted solution]

I believe this is accessed with the last command

#last

Gerald

[Dave Hutton]

Can also check fwtmp
cat wtmp | /usr/sbin/acct/fwtmp |more

Formats the output to something a little easier to read.

Dave

[John Carr_2]

Hi

last and lastb, lastb being bad logins

:-) John.

[John Carr_2]

you might also wish to look at the man pages

man wtmp
man btmp
man utmp

:-) John.

[PVR]

/var/adm/wtmp use the command #last
/var/adm/btmp use the command #lastb

/etc/utmp use the command #who #finger etc..

Wtmp gives all successful login information

btmp gives all bad login attempts

utmp gives the information abt users currently login into the system