RedHatLinux常见日志文件和常用命令(4)

会计考友

　w命令 　　w命令查询utmp文件并显示当前系统中每个用户和它所运行的进程信息。例如，键入w命令，然后按回车键，将显示如下内容：

QUOTE:

2 o, B; y+ `- e& A# ~7 k  u3:36pm up 1 day, 22:34, 6 users, load average: 0.23, 0.29, 0.27
2 ]) N2 `: y4 g! C' F/ Y6 ~: ZUSER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
5 [$ A' U) u$ ]4 Mchyang pts/0 202.38.68.242 3:06pm 2:04 0.08s 0.04s -bash
ynguo pts/2 202.38.79.47 3:32pm 0.00s 0.14s 0.05 w
lewis pts/3 202.38.64.233 1:55pm 30:39 0.27s 0.22s -bash
lewis pts/4 202.38.64.233 1:35pm 6.00s 4.03s 0.01s sh /home/users/
ynguo pts/7 simba.nic.ustc.e 2:12pm 0.00s 0.47s 0.24s telnet mail
ylou pts/8 202.38.64.235 2:15pm 1:09m 0.10s 0.04s -bash
2 C  o8 n' M% W( N# k5 z1 y　　users命令
/ t/ O4 E2 u4 E! D　　users命令用单独的一行打印出当前登录的用户，每个显示的用户名对应一个登录会话。如果一个用户有不止一个登录会话，那他的用户名将显示相同的次数。例如，键入users命令，然后按回车键，将显示如下内容：
* i3 h5 E& y) y  g- H/ ?" Z% J, i
QUOTE:
　　chyang lewis lewis ylou ynguo ynguo
2 x0 ^6 G. H! B% y+ h! h
6 x$ r; K. q3 b　　last命令

会计考友

</p>　　last命令往回搜索wtmp来显示自从文件第一次创建以来登录过的用户。例如：
9 f. t/ H) {, ^/ G6 B( D
4 `1 x/ g  g' b- I& dQUOTE:
5 k1 z5 W1 h* F9 i
chyang pts/9 202.38.68.242 Tue Aug 1 08:34 - 11:23 (02:49)
9 M8 F3 H: A5 N1 Ncfan pts/6 202.38.64.224 Tue Aug 1 08:33 - 08:48 (00:14)
chyang pts/4 202.38.68.242 Tue Aug 1 08:32 - 12:13 (03:40)
lewis pts/3 202.38.64.233 Tue Aug 1 08:06 - 11:09 (03:03)
lewis pts/2 202.38.64.233 Tue Aug 1 07:56 - 11:09 (03:12)
5 d# r4 |! \% X, x5 @, T5 J. N  \　　如果指明了用户，那么last只报告该用户的近期活动，例如，键入last ynguo命令，然后按回车键，将显示如下内容：

QUOTE:

ynguo pts/4 simba.nic.ustc.e Fri Aug 4 16:50 - 08:20 (15:30)
ynguo pts/4 simba.nic.ustc.e Thu Aug 3 23:55 - 04:40 (04:44)
ynguo pts/11 simba.nic.ustc.e Thu Aug 3 20:45 - 22:02 (01:16)
, g* `5 t6 @* ]2 G  Yynguo pts/0 simba.nic.ustc.e Thu Aug 3 03:17 - 05:42 (02:25)
8 {4 M" ?6 F% x3 |- `+ Yynguo pts/0 simba.nic.ustc.e Wed Aug 2 01:04 - 03:16 1+02:12)
& U6 e7 ?; {9 s% E; kynguo pts/0 simba.nic.ustc.e Wed Aug 2 00:43 - 00:54 (00:11)
ynguo pts/9 simba.nic.ustc.e Thu Aug 1 20:30 - 21:26 (00:55)