Linux last命令
Linux last命令用於顯示系統開機以來獲是從每月初登入者的訊息。
使用權限：所有使用者。
語法
shell>> last [options]
參數說明 ：
- -R 省略hostname 的欄位
- -num 展示前num 個
- username 展示username 的登入訊息
- tty 限制登入訊息包含終端機代號
實例
shell>> last -R -2 johnney pts/1 Mon Aug 14 20:42 still logged in johnney pts/0 Mon Aug 14 19:59 still logged in wtmp begins Tue Aug 1 09:01:10 2000 ### /var/log/wtmp shell>> last -2 minery minery pts/0 140.119.217.115 Mon Aug 14 18:37 - 18:40 (00:03) minery pts/0 140.119.217.115 Mon Aug 14 17:22 - 17:24 (00:02) wtmp begins Tue Aug 1 09:01:10 2000
一般顯示方法
# last
簡略顯示，並指定顯示的個數
# last -n 5 -R root pts/4 Thu May 13 17:25 still logged in root pts/2 Thu May 13 17:23 - 17:25 (00:02) root pts/1 Thu May 13 16:46 still logged in root pts/7 Thu May 13 15:36 still logged in root pts/9 Thu May 13 15:35 still logged in wtmp begins Thu May 13 18:55:40 2014
顯示最後一列顯示主機IP地址
# last -n 5 -a -i root pts/4 Thu May 13 17:25 still logged in 192.168.1.10 root pts/2 Thu May 13 17:23 - 17:25 (00:02) 192.168.1.10 root pts/1 Thu May 13 16:46 still logged in 192.168.1.10 root pts/7 Thu May 13 15:36 still logged in 192.168.1.10 root pts/9 Thu May 13 15:35 still logged in 192.168.1.10 wtmp begins Thu May 13 18:55:40 2014