Linux last 命令用于显示用户最近登录信息。
使用权限:所有使用者。
语法
shell>> last [options]
参数说明:
- -R 省略 hostname 的栏位
- -num 展示前 num 个
- username 展示 username 的登入讯息
- tty 限制登入讯息包含终端机代号
实例
shell>> last -R -2johnney pts/1 Mon Aug 14 20:42 still logged injohnney pts/0 Mon Aug 14 19:59 still logged inwtmp begins Tue Aug 1 09:01:10 2000 ### /var/log/wtmpshell>> last -2 mineryminery pts/0 140.119.217.115 Mon Aug 14 18:37 - 18:40 (00:03)minery pts/0 140.119.217.115 Mon Aug 14 17:22 - 17:24 (00:02)wtmp begins Tue Aug 1 09:01:10 2000
一般显示方法
# last
简略显示,并指定显示的个数
# last -n 5 -Rroot pts/4 Thu May 13 17:25 still logged in root pts/2 Thu May 13 17:23 - 17:25 (00:02) root pts/1 Thu May 13 16:46 still logged in root pts/7 Thu May 13 15:36 still logged in root pts/9 Thu May 13 15:35 still logged in wtmp begins Thu May 13 18:55:40 2014
显示最后一列显示主机IP地址
# last -n 5 -a -iroot pts/4 Thu May 13 17:25 still logged in 192.168.1.10root pts/2 Thu May 13 17:23 - 17:25 (00:02) 192.168.1.10root pts/1 Thu May 13 16:46 still logged in 192.168.1.10root pts/7 Thu May 13 15:36 still logged in 192.168.1.10root pts/9 Thu May 13 15:35 still logged in 192.168.1.10wtmp begins Thu May 13 18:55:40 2014