{"id":127,"date":"2020-06-03T02:18:22","date_gmt":"2020-06-02T18:18:22","guid":{"rendered":"https:\/\/byy3.com\/?p=127"},"modified":"2021-01-09T10:15:48","modified_gmt":"2021-01-09T02:15:48","slug":"linux%e6%9f%a5%e7%9c%8b%e7%94%a8%e6%88%b7%e7%99%bb%e5%bd%95%e4%bf%a1%e6%81%af","status":"publish","type":"post","link":"https:\/\/byy3.com\/?p=127","title":{"rendered":"linux\u67e5\u770b\u7528\u6237\u767b\u5f55\u4fe1\u606f"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">last\u547d\u4ee4\u67e5\u770b\u5168\u90e8\u767b\u5f55\u4fe1\u606f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1\u3001\u67e5\u770b\u5f53\u524d\u767b\u5f55\u7528\u6237\u4fe1\u606f<br>who\u547d\u4ee4\uff1a<br>who\u7f3a\u7701\u8f93\u51fa\u5305\u62ec\u7528\u6237\u540d\u3001\u7ec8\u7aef\u7c7b\u578b\u3001\u767b\u9646\u65e5\u671f\u4ee5\u53ca\u8fdc\u7a0b\u4e3b\u673a\u3002<br>who \/var\/log\/wtmp<br>\u53ef\u4ee5\u67e5\u770b\u81ea\u4ecewtmp\u6587\u4ef6\u521b\u5efa\u4ee5\u6765\u7684\u6bcf\u4e00\u6b21\u767b\u9646\u60c5\u51b5<br>\uff081\uff09-b\uff1a\u67e5\u770b\u7cfb\u7edf\u6700\u8fd1\u4e00\u6b21\u542f\u52a8\u65f6\u95f4<br>\uff082\uff09-H\uff1a\u6253\u5370\u6bcf\u5217\u7684\u6807\u9898<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">users\u547d\u4ee4\uff1a<br>\u6253\u5370\u5f53\u524d\u767b\u5f55\u7684\u7528\u6237\uff0c\u6bcf\u4e2a\u663e\u793a\u7684\u7528\u6237\u540d\u5bf9\u5e94\u4e00\u4e2a\u767b\u9646\u4f1a\u8bdd\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2\u3001\u67e5\u770b\u547d\u4ee4\u5386\u53f2<br>\u6bcf\u4e2a\u7528\u6237\u90fd\u6709\u4e00\u4efd\u547d\u4ee4\u5386\u53f2\u8bb0\u5f55<br>\u67e5\u770b$HOME\/.bash_history<br>\u6216\u8005\u5728\u7ec8\u7aef\u8f93\u5165\uff1a history<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3\u3001last\u547d\u4ee4<br>\u67e5\u770b\u7528\u6237\u767b\u5f55\u5386\u53f2<br>\u6b64\u547d\u4ee4\u4f1a\u8bfb\u53d6 \/var\/log\/wtmp\u6587\u4ef6\uff1b\/var\/log\/btmp\u53ef\u4ee5\u663e\u793a\u8fdc\u7a0b\u767b\u9646\u4fe1\u606f\u3002<br>last\u9ed8\u8ba4\u6253\u5370\u6240\u6709\u7528\u6237\u7684\u767b\u9646\u4fe1\u606f\u3002<br>\u5982\u679c\u60f3\u6253\u5370\u67d0\u4e2a\u7528\u6237\u7684\u767b\u9646\u4fe1\u606f\uff0c\u53ef\u4ee5\u4f7f\u7528<br>last \u7528\u6237\u540d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9009\u9879\uff1a<br>\uff081\uff09-x\uff1a\u663e\u793a\u7cfb\u7edf\u5f00\u5173\u673a\u4ee5\u53ca\u6267\u884c\u7b49\u7ea7\u4fe1\u606f<br>\uff082\uff09-a\uff1a\u5c06\u767b\u9646ip\u663e\u793a\u5728\u6700\u540e\u4e00\u884c<br>\uff083\uff09-f \uff1a\u8bfb\u53d6\u7279\u5b9a\u6587\u4ef6\uff0c\u53ef\u4ee5\u9009\u62e9 -f \/var\/log\/btmp\u6587\u4ef6<br>\uff084\uff09-d\uff1a\u5c06IP\u5730\u5740\u8f6c\u6362\u4e3a\u4e3b\u673a\u540d<br>\uff085\uff09-n\uff1a\u8bbe\u7f6e\u5217\u51fa\u540d\u5355\u7684\u663e\u793a\u5217\u6570<br>\uff086\uff09-t\uff1a\u67e5\u770b\u6307\u5b9a\u65f6\u95f4\u7684\u7528\u6237\u767b\u5f55\u5386\u53f2<br>\u4f8b\u5982\uff1a<br>last -t 20150226160404<br>\u663e\u793a\u8fd9\u4e2a\u65f6\u95f4\u6233\u4e4b\u524d\u7684\u767b\u9646\u5386\u53f2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4\u3001lastlog\u547d\u4ee4<br>\u67e5\u770b\u6240\u6709\u7528\u6237\u6700\u8fd1\u4e00\u6b21\u767b\u5f55\u5386\u53f2<br>\u547d\u4ee4\u5c06\u8bfb\u53d6\/var\/log\/lastlog\u6587\u4ef6\uff1b\u7528\u6237\u6392\u5217\u987a\u5e8f\u6309\u7167\/etc\/passwd\u4e2d\u7684\u987a\u5e8f<br>\u9009\u9879\uff1a<br>\uff081\uff09 -u\uff1a\u67e5\u770b\u67d0\u4e2a\u7528\u6237\u7684\u6700\u540e\u4e00\u6b21\u767b\u9646\u5386\u53f2<br>\u4f8b\u5982\uff1a lastlog -u test<br>\u67e5\u770b\u7528\u6237test\u7684\u767b\u9646\u5386\u53f2<br>\uff082\uff09 -t\uff1a\u67e5\u770b\u6700\u8fd1\u51e0\u5929\u4e4b\u5185\u7684\u7528\u6237\u767b\u5f55\u5386\u53f2<br>\u4f8b\u5982\uff1a lastlog -t 1<br>\u67e5\u770b\u6700\u8fd11\u5929\u4e4b\u5185\u7684\u767b\u9646\u5386\u53f2<br>\uff083\uff09 -b\uff1a\u67e5\u770b\u6307\u5b9a\u5929\u6570\u4e4b\u524d\u7684\u7528\u6237\u767b\u5f55\u5386\u53f2<br>\u4f8b\u5982\uff1a lastlog -b 60<br>\u67e5\u770b60\u5929\u4e4b\u524d\u7684\u7528\u6237\u767b\u5f55\u5386\u53f2<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">5\u3001ac\u547d\u4ee4<br>\u6839\u636e\/var\/log\/wtmp\u6587\u4ef6\u4e2d\u7684\u767b\u9646\u548c\u9000\u51fa\u65f6\u95f4\u62a5\u544a\u7528\u6237\u8fde\u63a5\u7684\u65f6\u95f4\uff08\u5c0f\u65f6\uff09\uff0c\u9ed8\u8ba4\u8f93\u51fa\u62a5\u544a\u603b\u65f6\u95f4<br>\uff081\uff09-p\uff1a\u663e\u793a\u6bcf\u4e2a\u7528\u6237\u7684\u8fde\u63a5\u65f6\u95f4<br>\uff082\uff09-d\uff1a\u663e\u793a\u6bcf\u5929\u7684\u8fde\u63a5\u65f6\u95f4<br>\uff083\uff09-y\uff1a\u663e\u793a\u5e74\u4efd\uff0c\u548c-d\u914d\u5408\u4f7f\u7528<br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>last\u547d\u4ee4\u67e5\u770b\u5168\u90e8\u767b\u5f55\u4fe1\u606f 1\u3001\u67e5\u770b\u5f53\u524d\u767b\u5f55\u7528\u6237\u4fe1\u606fwho\u547d\u4ee4\uff1awho\u7f3a\u7701\u8f93\u51fa\u5305\u62ec\u7528\u6237\u540d\u3001\u7ec8\u7aef\u7c7b\u578b\u3001\u767b\u9646\u65e5\u671f [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[353],"class_list":["post-127","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux"],"_links":{"self":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=127"}],"version-history":[{"count":0,"href":"https:\/\/byy3.com\/index.php?rest_route=\/wp\/v2\/posts\/127\/revisions"}],"wp:attachment":[{"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/byy3.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}