From owner-freebsd-questions@FreeBSD.ORG Sun Sep 19 13:20:11 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5960316A4CE for ; Sun, 19 Sep 2004 13:20:11 +0000 (GMT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8E0BF43D3F for ; Sun, 19 Sep 2004 13:20:10 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) i8JDK5fg095327 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 19 Sep 2004 14:20:05 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)i8JDK427095326; Sun, 19 Sep 2004 14:20:04 +0100 (BST) (envelope-from matthew) Date: Sun, 19 Sep 2004 14:20:04 +0100 From: Matthew Seaman To: John Lee Message-ID: <20040919132004.GK51161@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , John Lee , questions@freebsd.org References: <20040919210416.X17597@ix.networx.com.sg> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="9RxwyT9MtfFuvYYZ" Content-Disposition: inline In-Reply-To: <20040919210416.X17597@ix.networx.com.sg> User-Agent: Mutt/1.4.2.1i X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.5.6 (smtp.infracaninophile.co.uk [IPv6:::1]); Sun, 19 Sep 2004 14:20:05 +0100 (BST) X-Virus-Scanned: clamd / ClamAV version devel-20040904, clamav-milter version 0.75l on smtp.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.64 X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk cc: questions@freebsd.org Subject: Re: lastlog X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Sep 2004 13:20:11 -0000 --9RxwyT9MtfFuvYYZ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Sep 19, 2004 at 09:05:11PM +0800, John Lee wrote: > How do i retrieve last login details for JUN-2004 > as I can only see SEP-04 now.. >=20 > last | grep user --> only shows SEP i guess >=20 > How can i get JUNE? Look at the saved copies of wtmp under /var/log. Hmmm... By default newsyslog(1) is setup to keep 4 old copies of the wtmp file around, and to switch to a new file at the start of every month, so you should have: wtmp September (ie. this month) wtmp.0 August wtmp.1 July wtmp.2 June wtmp.3 May still on your system. (Any earlier than May and you'ld have had to retrieve the appropriate wtmp file from backup) So, try: last -f /var/log/wtmp.2 user Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --9RxwyT9MtfFuvYYZ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBTYeEiD657aJF7eIRAgloAJsGN/Pl68IOLFwJL4HstiF+22Jj6gCdF1W8 eBq8f5wjnPyoEhu2rXtilsQ= =JCyH -----END PGP SIGNATURE----- --9RxwyT9MtfFuvYYZ--