RedHatLinux常见日志文件和常用命令(4)

会计考友

　w命令 　　w命令查询utmp文件并显示当前系统中每个用户和它所运行的进程信息。例如，键入w命令，然后按回车键，将显示如下内容：

- y- e. F4 k! k1 d' J$ D1 J  G2 a4 DQUOTE:

. c3 v$ q2 \& K  w2 w1 c4 T3:36pm up 1 day, 22:34, 6 users, load average: 0.23, 0.29, 0.27
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
7 e5 L! @# P  z" J/ [chyang pts/0 202.38.68.242 3:06pm 2:04 0.08s 0.04s -bash
0 D& d, u- n! D' U7 g4 X: Aynguo pts/2 202.38.79.47 3:32pm 0.00s 0.14s 0.05 w
lewis pts/3 202.38.64.233 1:55pm 30:39 0.27s 0.22s -bash
9 h  M; o7 u/ W# R! u/ Ylewis pts/4 202.38.64.233 1:35pm 6.00s 4.03s 0.01s sh /home/users/
ynguo pts/7 simba.nic.ustc.e 2:12pm 0.00s 0.47s 0.24s telnet mail
8 S( N+ m5 k9 @$ W/ Pylou pts/8 202.38.64.235 2:15pm 1:09m 0.10s 0.04s -bash
　　users命令
　　users命令用单独的一行打印出当前登录的用户，每个显示的用户名对应一个登录会话。如果一个用户有不止一个登录会话，那他的用户名将显示相同的次数。例如，键入users命令，然后按回车键，将显示如下内容：
% z& {) x+ v( p, R6 ]  z% m6 g
$ F' f0 n3 M/ X: P; A& D, OQUOTE:
$ ?9 D' E* ]5 c3 `7 M. A& e# s) s) N9 I　　chyang lewis lewis ylou ynguo ynguo
7 g3 c0 Q7 r$ m! {; ~
　　last命令

会计考友

</p>　　last命令往回搜索wtmp来显示自从文件第一次创建以来登录过的用户。例如：

QUOTE:
% E0 |9 F" ?1 X; b
chyang pts/9 202.38.68.242 Tue Aug 1 08:34 - 11:23 (02:49)
cfan pts/6 202.38.64.224 Tue Aug 1 08:33 - 08:48 (00:14)
6 P% F8 s8 T# G) G# b, z8 Xchyang pts/4 202.38.68.242 Tue Aug 1 08:32 - 12:13 (03:40)
) ]7 I* X4 m; y" b9 o% Ilewis pts/3 202.38.64.233 Tue Aug 1 08:06 - 11:09 (03:03)
: x; `& `8 z* e- ]; [lewis pts/2 202.38.64.233 Tue Aug 1 07:56 - 11:09 (03:12)
　　如果指明了用户，那么last只报告该用户的近期活动，例如，键入last ynguo命令，然后按回车键，将显示如下内容：

QUOTE:
+ G, N" k3 H! }
7 o! K5 u1 l: `. L$ A+ d8 eynguo pts/4 simba.nic.ustc.e Fri Aug 4 16:50 - 08:20 (15:30)
ynguo pts/4 simba.nic.ustc.e Thu Aug 3 23:55 - 04:40 (04:44)
ynguo pts/11 simba.nic.ustc.e Thu Aug 3 20:45 - 22:02 (01:16)
ynguo pts/0 simba.nic.ustc.e Thu Aug 3 03:17 - 05:42 (02:25)
6 ?, ~1 L/ D# u6 m$ Cynguo pts/0 simba.nic.ustc.e Wed Aug 2 01:04 - 03:16 1+02:12)
ynguo pts/0 simba.nic.ustc.e Wed Aug 2 00:43 - 00:54 (00:11)
! R% q% x% Q+ N" o2 H* ?ynguo pts/9 simba.nic.ustc.e Thu Aug 1 20:30 - 21:26 (00:55)