The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
25 views

why is cron flooding wtmp and last?

When I type the last command, I see a bunch of entries in there for cron. Every single cron job that gets run creates an entry and it's flooding wtmp with unnecessary entries. Any ideas how I can stop ...
0
votes
1answer
15 views

Viewing older entries for lastb on linux

I have a server (Amazon Linux) that has been up for 261 days: [server]$ uptime 16:29:46 up 261 days, 4:47, 1 user, load average: 0.05, 0.16, 0.18 I am trying to find out if there have been any ...
0
votes
1answer
43 views

Parse different lastlog[s]

I have the lastlog from 100 machines that I need to parse. Since I have them all centrally located, is there a way to parse these? Or do I need to go back to each machine and type the "lastlog" ...
-1
votes
1answer
85 views

last command fails - how to fix it so that it works again?

The server is Ubuntu 11.10. When I issue the "last" command from the command line, it gives the following output: # last last: read failed! wtmp begins Fri Apr 18 15:47:48 2014 This I suspect is ...
1
vote
0answers
408 views

unknown user in last output

I found a lot of lines (~900) similar to these in the last output of one of my hosts: trustpor ftpd31576 www.trustport.co Tue Oct 1 10:03 - 10:03 (00:00) trustpor ftpd31575 www.trustport.co ...
0
votes
2answers
50 views

Copy latest created directory

I would like to make a second backup from the latest created backup. So I tried the shell command: last='ls -tr | tail -1' cp -r /path/.../"$last" /path/.../backup/ but it copies a randome backup. ...
0
votes
2answers
57 views

RewriteRules not stopping with [L] flag?

A simpel mod rewrite in .htaccess. If I open for example /lib/js/core/jquery.min.js, Apache2 takes the last rule and not the first. How can I fix this? RewriteEngine on RewriteRule ...
0
votes
1answer
101 views

Last command - very strange output

When trying to execute "last" command I am getting my last logins mixed with the content from files that exists on that server. for instance: <tbody tr>=0A </ <tr>=0A ...
2
votes
1answer
251 views

“last” command indicates someone logged in for 00:00 - was our server compromised?

I noticed the following weird entry from my "last" command from an IP address in Romania: user pts/0 89.123.111.228 Sat Jul 28 12:48 - 12:48 (00:00) I'm wondering if that means I was ...
2
votes
2answers
2k views

Getting login year data with the 'last' command on linux

On Solaris, there the command 'fwtmp' provide the year information from the wtmp logs. For example: host # /usr/lib/acct/fwtmp < /var/adm/wtmpx > tmp_wtmpx_file host # head -1 tmp_wtmpx_file ...