> I wa sin wonder how could I read the content of wmtp and umtp files.
> I know they are for accounting info, last login and similar but I can't use
> cat, vi more.
> Any specific way to use them?
> The "lastlog" if i am not mistake, last "command" shows the lastlog, ?
The "last" command read the wtmp file. You may use the optional -f to
specify the file name (e.g. last -f /var/adm/wtmp). Redundant but I
capture the wtmp and utmp files during investigations so I use this
method to reading the accounting files from other systems.
Information Security is a TEAM effort ... it's everyone's responsibility!
Mr. G D Geen
Texas Instruments, Incorporated