wtmp

From Wikipedia, the free encyclopedia

The /var/log/wtmp is a file on Unix-like systems that keeps track of all logins and logouts to the system. It is defined in the Filesystem Hierarchy Standard 2.3.

[edit] Format

The wtmp file records all logins and logouts. Its format is exactly like utmp except that a null user name indicates a logout on the associated terminal. Furthermore, the terminal name ~ with user name shutdown or reboot indicates a system shutdown or reboot and the pair of terminal names / logs the old/new system time when date changes it.