Date: Sun, 19 Sep 2004 14:20:04 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: John Lee <john@ix.networx.com.sg> Cc: questions@freebsd.org Subject: Re: lastlog Message-ID: <20040919132004.GK51161@happy-idiot-talk.infracaninophile.co.uk> In-Reply-To: <20040919210416.X17597@ix.networx.com.sg> References: <20040919210416.X17597@ix.networx.com.sg>
next in thread | previous in thread | raw e-mail | index | archive | help
--9RxwyT9MtfFuvYYZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Sep 19, 2004 at 09:05:11PM +0800, John Lee wrote:
> How do i retrieve last login details for JUN-2004
> as I can only see SEP-04 now..
>=20
> last | grep user --> only shows SEP i guess
>=20
> How can i get JUNE?
Look at the saved copies of wtmp under /var/log. Hmmm... By default
newsyslog(1) is setup to keep 4 old copies of the wtmp file around,
and to switch to a new file at the start of every month, so you should
have:
wtmp September (ie. this month)
wtmp.0 August
wtmp.1 July
wtmp.2 June
wtmp.3 May
still on your system. (Any earlier than May and you'ld have had to
retrieve the appropriate wtmp file from backup)
So, try:
last -f /var/log/wtmp.2 user
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614 Bucks., SL7 1TH UK
--9RxwyT9MtfFuvYYZ
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)
iD8DBQFBTYeEiD657aJF7eIRAgloAJsGN/Pl68IOLFwJL4HstiF+22Jj6gCdF1W8
eBq8f5wjnPyoEhu2rXtilsQ=
=JCyH
-----END PGP SIGNATURE-----
--9RxwyT9MtfFuvYYZ--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040919132004.GK51161>