Wcat
provides an easy way to recover trimmed information from wtmp binary
files. This tool can be useful for scripts that need only partial information
from them.
Notice that
wcat
output is
binary
wtmp entries so if this information is printed out to a terminal or screen
it might mess it up. A better use of wcat would be:
wcat | rawtmp -w -
OPTIONS
-w wtmp|-
Read alternate wtmp file.
-X[3]
Read tacacs 3.x wtmp format.
-X4
Read tacacs 4.0 wtmp format.
-d
Output time in MMM DD HH:MM:SS date format.
-a
Print contents of ut_addr (if it exists) instead of ut_host.
-s start
Display accounting info from `start'.
-e end
Display accounting info up to `end'.
-b H:M:S
Show accounting info from the last few hours/minutes/seconds.