4 comment

  1. lsof will give you a list of all files being accessed at the moment and the users that are accessing them, among other things.

  2. there is apparently another file which not many know of is /var/log/btmp and the related command to read it is lastb.
    lastb is same as that of last except that it shows all the bad login attempts which are recorded into /var/log/btmp, if the file is not present you would have to touch it to get started.

    Nikhil

    Have a question? Post it on our forum!