请问，如何察看外部主机或终端登陆到本地主机上的历史访问纪录

linktp

请问，如何察看外部主机或终端登陆到本地主机上的历史访问纪录?
谢谢

lrx

You can use "last" command.

If you just want limit the report to number of lines or recent records.
You can type " last -100".
The 100 recent records will be printed out.

zhu_st

You can use "last" command.

If you just want limit the report to number of lines or recent records.
You can type " last -100".
The 100 recent records will be printed out.


但如果想要知道登陆者的IP呢？ 怎么做？

linktp

非常感谢两位老兄的回复,兄弟还有点不明白如何察看IP及如何察看他们的具体操作.谢谢

cuixn

whodo
     who -t

linktp

原帖由 "cuixn" 发表：
whodo
     who -t

   


只能察看当前正在运行的用户进程.我想HP-UN这种系统本身一定有监视外部登陆的功能吧,能不能用一个命令看到或是系统自动纪录存放在那个文件里,请高人指点.谢谢.

albert

'last' command to access /var/tmp/wtmp (login database file).
'lastb' command to access /var/tmp/btmp (bad login database file)
But these files only contain brief information about login and logout.
If you want to view the detailed operation one user does in one system, I am afraid you have to use 'Audit' sub-system of HPUX, which will record every operation every user manipulates. But at the same time it has some impact to your performance so most users do not choose to use it.
I never use it so I can not help you more.
Perhaps you can search some materials about it from HP's website.

dutboy

last -R应该可以吧

jiangxiaoyuxp

好象命令在 solaris 是可以显示ip地址的