1.\" Copyright (c) 1980, 1990, 1993 2.\" The Regents of the University of California. All rights reserved. 3.\" 4.\" Redistribution and use in source and binary forms, with or without 5.\" modification, are permitted provided that the following conditions 6.\" are met: 7.\" 1. Redistributions of source code must retain the above copyright 8.\" notice, this list of conditions and the following disclaimer. 9.\" 2. Redistributions in binary form must reproduce the above copyright 10.\" notice, this list of conditions and the following disclaimer in the 11.\" documentation and/or other materials provided with the distribution. 12.\" 3. All advertising materials mentioning features or use of this software 13.\" must display the following acknowledgement: 14.\" This product includes software developed by the University of 15.\" California, Berkeley and its contributors. 16.\" 4. Neither the name of the University nor the names of its contributors 17.\" may be used to endorse or promote products derived from this software 18.\" without specific prior written permission. 19.\" 20.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 21.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 24.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30.\" SUCH DAMAGE. 31.\" 32.\" @(#)last.1 8.1 (Berkeley) 6/6/93 33.\" $FreeBSD: src/usr.bin/last/last.1,v 1.6.2.8 2003/02/25 20:31:18 trhodes Exp $ 34.\" $DragonFly: src/usr.bin/last/last.1,v 1.3 2006/02/17 19:39:09 swildner Exp $ 35.\" 36.Dd March 1, 2002 37.Dt LAST 1 38.Os 39.Sh NAME 40.Nm last 41.Nd indicate last logins of users and ttys 42.Sh SYNOPSIS 43.Nm 44.Op Fl Ns Ar n 45.Op Fl y 46.Oo 47.Fl d 48.Sm off 49.Op Oo Ar CC Oc Ar YY 50.Op Ar MM DD 51.Ar hh mm 52.Op Ar .SS 53.Sm on 54.Oc 55.Op Fl f Ar file 56.Op Fl h Ar host 57.Op Fl s 58.Op Fl t Ar tty 59.Op Fl w 60.Op Ar user ... 61.Sh DESCRIPTION 62The 63.Nm 64utility will either list the sessions of specified 65.Ar users , 66.Ar ttys , 67and 68.Ar hosts , 69in reverse time order, 70or list the users logged in at a specified date and time. 71Each line of output contains 72the user name, the tty from which the session was conducted, any 73hostname, the start and stop times for the session, and the duration 74of the session. 75If the session is still continuing or was cut short by 76a crash or shutdown, 77.Nm 78will so indicate. 79.Pp 80The following options are available: 81.Bl -tag -width indent-two 82.It Fl Ar n 83Limit the report to 84.Ar n 85lines. 86.It Fl d Ar date 87Specify the snapshot date and time. 88All users logged in at the snapshot date and time will 89be reported. 90This may be used with the 91.Fl f 92option to derive the results from stored 93.Pa wtmp 94files. 95When this argument is provided, all other options except for 96.Fl f 97and 98.Fl Ar n 99are ignored. 100The argument should be in the form 101.Sm off 102.Op Oo Ar CC Oc Ar YY 103.Op Ar MM DD 104.Ar hh mm 105.Op Ar .SS 106.Sm on 107where each pair of letters represents the following: 108.Pp 109.Bl -tag -width Ds -compact -offset indent 110.It Ar CC 111The first two digits of the year (the century). 112.It Ar YY 113The second two digits of the year. 114If 115.Ar YY 116is specified, but 117.Ar CC 118is not, a value for 119.Ar YY 120between 69 and 99 results in a 121.Ar CC 122value of 19. 123Otherwise, a 124.Ar CC 125value of 20 is used. 126.It Ar MM 127Month of the year, from 1 to 12. 128.It Ar DD 129Day of the month, from 1 to 31. 130.It Ar hh 131Hour of the day, from 0 to 23. 132.It Ar mm 133Minute of the hour, from 0 to 59. 134.It Ar SS 135Second of the minute, from 0 to 61. 136.El 137.Pp 138If the 139.Ar CC 140and 141.Ar YY 142letter pairs are not specified, the values default to the current 143year. 144If the 145.Ar SS 146letter pair is not specified, the value defaults to 0. 147.It Fl f Ar file 148Read the file 149.Ar file 150instead of the default, 151.Pa /var/log/wtmp . 152.It Fl h Ar host 153.Ar Host 154names may be names or internet numbers. 155.It Fl s 156Report the duration of the login session in seconds, instead of the 157default days, hours and minutes. 158.It Fl t Ar tty 159Specify the 160.Ar tty . 161Tty names may be given fully or abbreviated, for example, 162.Dq Li "last -t 03" 163is 164equivalent to 165.Dq Li "last -t tty03" . 166.It Fl w 167Widen the duration field to show seconds, as well as the 168default days, hours and minutes. 169.It Fl y 170Report the year in the session start time. 171.El 172.Pp 173If multiple arguments are given, 174and a snapshot time is not specified, 175the information which applies to any of the 176arguments is printed, e.g., 177.Dq Li "last root -t console" 178would list all of 179.Dq Li root Ns 's 180sessions as well as all sessions on the console terminal. 181If no 182users, hostnames or terminals are specified, 183.Nm 184prints a record of 185all logins and logouts. 186.Pp 187The pseudo-user 188.Ar reboot 189logs in at reboots of the system, thus 190.Dq Li last reboot 191will give an indication of mean time between reboot. 192.Pp 193If 194.Nm 195is interrupted, it indicates to what date the search has 196progressed. 197If interrupted with a quit signal 198.Nm 199indicates how 200far the search has progressed and then continues. 201.Sh FILES 202.Bl -tag -width /var/log/wtmp -compact 203.It Pa /var/log/wtmp 204login data base 205.El 206.Sh SEE ALSO 207.Xr lastcomm 1 , 208.Xr utmp 5 , 209.Xr ac 8 210.Sh HISTORY 211A 212.Nm 213utility appeared in 214.Bx 3.0 . 215.Sh BUGS 216If a login shell should terminate abnormally for some reason, it is likely 217that a logout record won't be written to the 218.Pa wtmp 219file. 220In this case, 221.Nm 222will indicate the logout time as "shutdown". 223