Subject: Re: Last users today
To: Iggy Drougge <optimus@canit.se>
From: Steven M. Bellovin <smb@research.att.com>
List: netbsd-users
Date: 01/22/2002 20:20:53
In message <462.787T2050T866003optimus@canit.se>, "Iggy Drougge" writes:
>I'd like to add a section to my daily security output, listing all users=
who
>have, or are, logged in during the day. Unfortunately, there doesn't see=
m to
>be any facility in last(1) for that. How would I go about solving this i=
n a
>simple way? It might even be an area of future improvement in last. =3D)=
How far back do you need login records? You might want to add some =
code to /etc/daily.local to rename /var/log/wtmp daily instead of =
weekly, in which case 'last' would give you what you want.
--Steve Bellovin, http://www.research.att.com/~smb
Full text of "Firewalls" book now at http://www.wilyhacker.com