Who’s connected ?
To know who’s connected on your computer use the following commands : Commands : who : show the connected users : Linux/Mac last : show last connexion (passed ) : Linux / Mac lastb : show last connexion (failed) : Linux These files may also contain clues :
|
1 2 3 4 5 |
/etc/passwd : local users /etc/group : local groups /etc/log/wtmp : binary file with all connexion log ( Only Linux ) /var/log/utmp : binray file with all user actually connected ( Only Linux) /var/log/btmp : Binary file with all failed connexion ( Only Linux ) |
