Possible compromise ?
Eric Anderson
anderson at centtech.com
Tue Jan 27 13:11:31 PST 2004
Nicolas Rachinsky wrote:
> * Peter Rosa <prosa at pro.sk> [2004-01-27 21:44 +0100]:
>
>>As Mr. Anderson wrote, I tried last -f /var/log/lastlog and get, what is in
>>attachment.
>>Unreadable chaos, bad dates. May be, lastlog has not exact structure for
>>last, isn't it ?
>
>
> The program to show /var/log/lastlog is lastlogin.
Actually, last reads it also, the lastlogin tool is a "subtool" I think:
From lastlogin(8):
"The lastlogin utility differs from last(1) in that it only prints
infor-mation regarding the very last login session. The last login
database is never turned over or deleted in standard usage."
Eric
--
------------------------------------------------------------------
Eric Anderson Sr. Systems Administrator Centaur Technology
Today is the tomorrow you worried about yesterday.
------------------------------------------------------------------
More information about the freebsd-security
mailing list