w命令
第一行：当前系统运行了多久和系统负载谁正在远程登录系统并且在干什么
1 [root@martin ~]# w
2 11:30:33 up 4 days, 18:10, 2 users, load average: 0.00, 0.00, 0.00
3 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
4 root pts/0 10.10.10.1 10:50 0.00s 0.03s 0.00s w
5 root pts/1 10.10.10.1 10:51 37:58 0.00s 0.00s -bash
who命令
显示谁正在远程登录和登录的详细时间
[root@martin ~]# who
root pts/0 2017-04-10 10:50 (10.10.10.1)
root pts/1 2017-04-10 10:51 (10.10.10.1)
last命令
显示最近远程登录的用户和查看已经登录的用户
1 [root@martin ~]# last
2 root pts/1 10.10.10.1 Mon Apr 10 10:51 still logged in #正在远程登录的用户
3 root pts/0 10.10.10.1 Mon Apr 10 10:50 still logged in
4 root pts/0 10.10.10.1 Fri Apr 7 14:54 - 18:49 (03:54)
5 root pts/0 10.10.10.1 Fri Apr 7 11:33 - 11:53 (00:20)
6 root pts/0 10.10.10.1 Fri Apr 7 11:28 - 11:31 (00:02)
7 root pts/0 10.10.10.1 Fri Apr 7 11:03 - 11:21 (00:17)
8 root pts/0 10.10.10.1 Thu Apr 6 10:58 - 14:42 (03:44)
9 reboot system boot 2.6.32-431.el6.x Wed Apr 5 17:20 - 11:37 (4+18:17)
10 root tty1 Wed Apr 5 17:19 - down (00:00)
11 reboot system boot 2.6.32-431.el6.x Wed Apr 5 17:18 - 17:20 (00:01)
lastlog命令
显示系统中所用用户的最近一次的登录信息
1 [root@martin ~]# lastlog
2 Username Port From Latest
3 root pts/1 10.10.10.1 Mon Apr 10 10:51:42 +0800 2017
4 bin **Never logged in**
5 daemon **Never logged in**
6 adm **Never logged in**
7 lp **Never logged in**
8 sync **Never logged in**
9 shutdown **Never logged in**
10 halt **Never logged in**
11 mail **Never logged in**
12 uucp **Never logged in**
13 operator **Never logged in**
14 games **Never logged in**
15 gopher **Never logged in**
16 ftp **Never logged in**
17 nobody **Never logged in**
18 vcsa **Never logged in**
19 saslauth **Never logged in**
20 postfix **Never logged in**
21 sshd **Never logged in**
22 centos **Never logged in**
本文参考自 “李导的博客” 博客，原地址http://lidao.blog.51cto.com/3388056/1913667