Saturday, February 10, 2007

Determine Times When a User Logged in and Out

You can determine the actual times when a particular user was logged onto the system. This can be quite useful when an undocumented change is upsetting your customer, and you need to back out the change soonest. Moreover, it can be useful in tracking down intruders.

Here's an example of its use.

No arguments will list all users and their times
# last

For a particular user
# last esofthub
esofthub pts/3 wkstn2 Wed Oct 31 23:57 - 01:07 (1+01:09)
esofthub console :0 Sun Oct 28 22:28 - 23:50 (4+01:22)
esofthub console :0 Wed May 30 22:16 - 22:37 (14+00:20)
esofthub console :0 Fri May 11 20:59 - 21:47 (00:47)
esofthub console :0 Tue Apr 24 23:03 - 07:32 (10+08:29)
esofthub console :0 Tue Apr 24 23:02 - 23:02 (00:00)

No comments: