__/ [Hossain] on Saturday 14 January 2006 03:57 \__
> Folks
> Wondering how to check the login/attempted login record.
> Searching over google tells it has something to do /var/log/wtmp
> but couldn't figure out.
>
> Thanks for the info
> masrur
What could you not figure out specifically? Are all the login records there?
There appear to be many in compressed files, along the most recent batch
which is uncompressed. They are not very easily readable, but the username
and other details are all there and can be viewed in a text editor.
Have you tried running 'last' yet? It might prove useful in this
circumstance, depending on how far back you wish to explore. It only lists
successful logins though.
Roy
|
|
