GNU Radius Reference Manual: 11.2 radlast

11.2 `radlast`

The radlast utility lists sessions of specified users, NASes, NAS ports, and hosts, in reverse time order. By default, each line of output contains the login name, the NAS short name and port number from where the session was conducted, the host IP or name, the start and stop times for the session, and the duration of the session. If the session is still continuing, radlast will so indicate.

When the ‘-l’ option is specified, radlast produces long output. It includes following fields:

Login name
NAS short name
Port number
Connection protocol
Port type
Session ID
Caller ID
Framed IP address
Session Start Time
Session Stop Time
Duration of the Session

[ < ]

[ > ]

[ << ]

[ Up ]

[ >> ]

[Top]

[Contents]

[Index]

[ ? ]

11.2.1 `radlast` Command Line Options

Use following command line options to control the behavior of the radlast utility:

‘-number’
‘-c number’
‘--count number’: When given this option, radlast will output at most this many lines of information.
‘-f’
‘--file name’: Read the specified file instead of the default ‘/var/log/radwtmp’.
‘-h hostname’
‘--host hostname’: Report the logins from given host. Host can be either a name or a dotted-quad Internet address.
‘-n shortname’
‘--nas shortname’: Report the logins from the given NAS.
‘-l’
‘--long-format’: Long output format. Report all the information stored in ‘radwtmp’ file.
‘-p number’
‘--port number’: Report the logins on a given port. The port may be specified either fully or abbreviated, e.g. radlast -p S03 or radlast -p 3.
‘-s’
‘--show-seconds’: Report the duration of the login session in seconds instead of the default days, hours, and minutes.
‘-t’: The same as ‘-p’. This flag is provided for compatibility with last(1).
‘-w’
‘--wide’: Widen the duration field to show seconds as well as the default days, hours and minutes.

If multiple arguments are given, the logical OR operation between them is assumed, i.e., the information selected by each argument is printed. This, however, does not apply to the ‘-c’ option. That option is always combined with the rest of command line by logical AND.

The pseudo-user ‘~reboot’ logs in on every reboot of the network access server.

If radlast is interrupted, it indicates to what date the search had progressed.