NAME
wcat - printout wtmp entries
SYNOPSIS
wcat [-w wtmp|-] [-adX[3|4]] [-s start] [-e end] [-b H[:M[:S]]]
[--help] [--version]
SYNOPSIS
Wcat provides an easy way to recover trimmed information from wtmp
binary files. This tool can be useful for scripts that need only
partial information from them.
Notice that wcat output is binary wtmp entries so if this information
is printed out to a terminal or screen it might mess it up. A better
use of wcat would be: wcat | rawtmp -w -
OPTIONS
-w wtmp|-
Read alternate wtmp file.
-X[3] Read tacacs 3.x wtmp format.
-X4 Read tacacs 4.0 wtmp format.
-d Output time in MMM DD HH:MM:SS date format.
-a Print contents of ut_addr (if it exists) instead of ut_host.
-s start
Display accounting info from ‘start’.
-e end Display accounting info up to ‘end’.
-b H:M:S
Show accounting info from the last few hours/minutes/seconds.
--help Print this help message.
--version
Print the version of rawtmp.
SEE ALSO
sac(8), ac(1), last(1), rawtmp(1), wtmp(5), netdate(8L)
FILES
/var/log/wtmp login database
/usr/adm/radacct/.../detail Radius accounting logs
AUTHOR
The upstream author of wcat is Steve Baker (ice@mama.indstate.edu)
This manpage was written by Javier Fernandez-Sanguino based on help2man
for the Debian GNU/Linux distribution (but can be used by others).