On Wednesday 21 December 2005 04:32 am, Gavin Seddon wrote:
> Hi all,
> I have been looking in '/var/log' for users logging on. The files and
> directories in there are fastidiously organised (to say the least).
> Better than usual UNIX distros. What is the best place to look for
Try looking at auth.log and wtmp. auth.log is a plaintext log of login
attempts, and wtmp is a binary file that is used by the "who" command, and
can also be accessed by the "last" command.
systems design and integration,
firstname.lastname@example.org mailing list