The output of command `w`is not consitent with `last` (connection in the future)
Issue
-
From the output of the command
w
:# w 11:30:17 up 4 days, 38 min, 4 users, load average: 0.00, 0.00, 0.00 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user1 pts/0 192.168.1.50 Fri03 42:15m 0.20s 0.20s -bash user2 pts/1 192.168.1.20 Fri09 0.00s 0.12s 0.11s sshd: user2 [priv] user1 pts/2 192.168.1.50 Fri15 41:24m 0.07s 0.07s -bash user2 pts/3 192.168.1.20 10:12 15:04 0.00s 0.00s -bash
=> it seems that user1 connected to the system Friday the 15th.
-
This is not consistent with output of
last
:# last -10 user2 pts/3 192.168.1.20 Sun Apr 12 10:12 still logged in user1 pts/2 192.168.1.50 Fri Apr 10 15:26 still logged in user2 pts/2 192.168.1.20 Fri Apr 10 14:29 - 14:29 (00:00) user2 pts/1 192.168.1.20 Fri Apr 10 09:23 still logged in user1 pts/0 192.168.1.50 Fri Apr 10 03:28 still logged in user1 pts/0 192.168.1.50 Fri Apr 10 03:23 - 03:27 (00:04) user1 pts/0 192.168.1.50 Fri Apr 10 03:21 - 03:21 (00:00) user1 pts/0 192.168.1.50 Fri Apr 10 02:20 - 02:48 (00:28) user1 pts/0 192.168.1.50 Fri Apr 10 02:06 - 02:17 (00:11) ----------------------------------------------------------------------- wtmp begins Mon Apr 6 13:01:22 2020
-
And the date (the connection appears to be in the future):
date Tue Apr 14 00:51:39 EDT 2020
Environment
- Red Hat Enterprise Linux
- w
- login
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.