Possible compromise ?

Eric Anderson anderson at centtech.com
Tue Jan 27 13:11:31 PST 2004


Nicolas Rachinsky wrote:
> * Peter Rosa <prosa at pro.sk> [2004-01-27 21:44 +0100]:
> 
>>As Mr. Anderson wrote, I tried last -f /var/log/lastlog and get, what is in
>>attachment.
>>Unreadable chaos, bad dates. May be, lastlog has not exact structure for
>>last, isn't it ?
> 
> 
> The program to show /var/log/lastlog is lastlogin.


Actually, last reads it also, the lastlogin tool is a "subtool" I think:

 From lastlogin(8):
      "The lastlogin utility differs from last(1) in that it only prints 
infor-mation regarding the very last login session.  The last login 
database is never turned over or deleted in standard usage."

Eric



-- 
------------------------------------------------------------------
Eric Anderson     Sr. Systems Administrator    Centaur Technology
Today is the tomorrow you worried about yesterday.
------------------------------------------------------------------



More information about the freebsd-security mailing list