Another utmpx parser besides last

From: Keith Resar (3fcb85eee6f3a@heavyk.org)
Date: Mon Feb 07 2005 - 10:52:54 EST

• Next message: Paul Lyons: "SB1000 Panic"
• Previous message: Eva Kolega: "WARNING errors at boot"
• Next in thread: Keith Resar: "SUMMARY: Another utmpx parser besides last"
• Reply: Keith Resar: "SUMMARY: Another utmpx parser besides last"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Does anyone know of a script/tool to parse the utmpx file from a
Solaris 8 system besides last?

We're trying to do some auditing after a possible compromise but
last does a lookup on the src IP address so we're getting a bum
domain name rather then something more useful.

Thanks for any pointers.
Keith.

-- 
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

• Next message: Paul Lyons: "SB1000 Panic"
• Previous message: Eva Kolega: "WARNING errors at boot"
• Next in thread: Keith Resar: "SUMMARY: Another utmpx parser besides last"
• Reply: Keith Resar: "SUMMARY: Another utmpx parser besides last"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:30:08 EDT