ELF > @ @ @A @ 8 @ @ @ @ @ @ @ @ @ @ / / 0 0` 0` 8 8 (0 (0` (0` @ @ D D Ptd ) )@ )@ Qtd /lib64/ld-linux-x86-64.so.2 GNU GNU xአr915ݢd: # @ # % ) |CEfUaqX 8 8 4 O x J ^ U g ] E ~ `3` 3` x 3` 3` 3` @ r %@ wfB s uf . tf~ < tfZ7 . ii
ti $ ui 0 1` 3` % 3` ' 1` 2` 2` 2` 2` 2` (2` 02`
82` @2` H2`
P2` X2` `2` h2` p2` x2` 2` 2` 2` 2` 2` 2` 2` 2` 2` 2` 2` 2` 2` 2` ! 2` " HK H5"% %$% @ %"% h %% h %% h %
% h %% h %$ h %$ h %$ h p%$ h `%$ h P%$ h
@%$ h 0%$ h %$ h
%$ h %$ h %$ h %$ h %$ h %$ h %$ h %z$ h %r$ h %j$ h p%b$ h `%Z$ h P%R$ h @%J$ h 0%B$ h %:$ h %2$ h %*$ h 1I^HHPTI%@ H %@ H@ GHH" HtHÐUHSH=# uK0` H# H0` HHH9s$f D HH# 0` H# H9r# H[fff. H= UHt Ht 0` ÐH=A# &@ 1 HH=D# t*H=6# HB)@ 1Hf D H ATUSHHPdH%( HD$H1Ht G8;" t%HT$HdH3%( y HP[]A\ HW H{ 1(@ rE1H{ D HS('(@ H[ -(@ 1:HS07(@ Hk9(@ HHD1H9(@ H¿ 1{< (@ 1f D ! HS@Hu
{87 HKHLCP&@ 1&@ 1HHl$ (@ H H H{ H{(@ H HHH&@ 1+H{ H{@ u
{8 (@ 1Df H-(@ 1f D C<$)@ f D g(@ 1f. ^(@ 1f. V(@ 1of. E H{ HP {(@ 19H{H+{HHIHI?H :HL)HHHH|jYHH?HHH)H HH)HH)HHH*H
L)HHHH?HH)HRHW)QΠEHH)HHH
L)ʅ Aȿ 1(@ nf C(@ 1Orf. H꾧(@ 1, 1AHC D pHt>H(@ 1E1{ 5(@ {(@ 1S (@ 1E1= (@ 1 HSHX&@ 1kf D HSH(@ 1K7f D (@ 1-3 AWAVAUATA UH(@ SH zA
1E1E1л LA- A, Mw H= ) HH A9~_HcHL H8-uD:5h H:
Y H:
J Ex
HcÃA9HT f D DP3` I$ M$) L lHHA7(@ e
f. H Hx=X y = =R uF)@ HA nHAtHAAǾN)@ HA >HtH|AƾW)@ HHt
HTEu E 5f G f D HHHpH=I H=J H=A P3`
HuH= YP3` H= 1Ht1HĈ []A\A]A^A_ Hƿ(@ u Hƿ(@ uG HH$HL$HH$HL$f@L) m @ Hƿ(@
Hƿ)@ uH\ A /f D Hƿ2)@ 3 wDP3` HHpHx R
o HH=p H'@ 1DG =h = =g 'H-p HH-n tD @ H} t'HaHHEPE< HHEP3` HHuH- HH- tD D }<t'H
HHEPE< HHEP3` 1 HHuP3` P3` HHH111IP3` HcL
L% Il$FHt rebof@ot@ ID$ "HtHsystem b@oot HH=" ID$(Ht
SID$0AD$8 H )@ HcHHwH= HH W H- HH- u#8 P3` HHH} tH[HIP3` HL H(P3` n f F)@ HAHD$tHAD$J)@ HsH N)@ HA WHtHAǾS)@ H/H9 W)@ HAHt HVAEu|$ t8D
h EHH= H[)@ 1AtDP3` , HIt%H@< LIGP3` / 9 D ExH
H= IP'@ 1_Jf. F)@ HHD$t HND$W)@ HAHt H*AǾO)@ HHJ H AH z)@ HHD$HHt' : u E:
u)@ HpHž)@ H`)@ HIHMDIH HHH )@ 18 At{|$ttAtn11 T$DDP3` H H5- HtLH$ HOHt$IE1LHP3` T - HH= H'@ 1yf K )@ )@ H$H$H Hu)@ HHtH =W =V )@ 1 H5 7HH7H= H'@ 1HG)@ HbHHu)@ HDH HAHHhDp_P3` N 11HHH߾W)@ H HcH߾N)@ H?(@ H= 1 H DIDP3` 8iH= H:)@ 1nP3` H= Ht -HT$HDt$8HD$@Ld$HHl$PD$X HT$(HT$0D$\ HD$` mH|$ HD$hHD$p H= '@ 1P3` 9 = HH
H= I'@ 1m )@ HA|H HG HW1HtHBXHGff. 1HtHGHp@< HPP ffffff. HHt 9P u 9pu9tH@XHu HGff. HHu f D H@XHt90uHGf D f D ATIUSH Ht"HoH9u^f D H9tHHCXHu1H[]A\ D HEXH} HCXH}(H}0HI\$H[]A\HCXHHCXHGH{ H{(H{0~H1tfATIUSH Ht0H{ HkXSH{(JH{0AHH6Hu[]I$ ID$ A\ff. H\$Hl$1Ll$Ld$H(HHDMtELgHIt$AD$< t
HID$(Ht
HID$0Al$8Ml$H H\$Hl$Ld$Ll$ H(f. H\$Hl$HLd$Ll$` Lt$H(AԉAM1H H@X H; D(H@ H@ hD` @8H@ H@( H@0 @< Lp@H@H H@P tVHSHt!HJXHt @ HHKHIXHuHBXHC H $Hl$Ld$Ll$Lt$ H( @ Hϐfffff. Hl$Ld$H-
L%
Ll$Lt$L|$H\$H8L)AIHICHt 1 @ LLDAHH9rH\$Hl$Ld$Ll$ Lt$(L|$0H8ÐUHSHH@
Ht 0` D HHHuH[ÐH/H usage: aulast [--stdin] [--proof] [--extract] [-f file] [user name] [tty]
audit event proof serial number: %lu
audit event proof serial numbers: %lu, %lu, %lu
Session data can be found with this search:
ausearch --start %s --end %s You probably need to be root for this to work
login reporting limited to %d for event: %lu
Bad user login for event: %lu
User login limited to %s for event: %lu
Bad user logout for event: %lu
start time error for event: %lu
%-8.8s %-8.u /dev/ %-12.12s ? %-16.16s still logged in
- down
- crash
gone - no logout
- %-7.5s (%d+%02d:%02d)
(%02d:%02d)
%x %T ausearch --start %s --session %d -a %lu
-f stdin already given
--bad --proof --extract wt aulast.log --stdin file already given
--debug Error - %s
pid old-auid old-ses Bad login for event: %lu
acct hostname addr terminal res success Session not found or updated
kernel @ @ @ @ `@ @@ ; ( ` x H x ( @ ` ( zR x 4 (= Di
K D 4 T H BAA Gpx
AABI L BBB B(I0I8G\
8A0A(B BBBI @ 8 @! $ X5 < * 4 T BDA p
ABF t
ABA , U BDA yAS @ Z0k$ MX0
E $ Q_@X libauparse.so.0 __gmon_start__ _Jv_RegisterClasses auparse_get_field_int auparse_get_serial auparse_first_record _fini auparse_init auparse_next_event auparse_get_time auparse_get_record_text auparse_next_field auparse_interpret_field auparse_destroy auparse_find_field auparse_get_type libaudit.so.1 libc.so.6 __printf_chk setlocale fopen __strdup getpwuid __stack_chk_fail stdin strftime getpwnam strstr __errno_location __fprintf_chk ctime fclose malloc stderr getuid localtime strerror __libc_start_main free _edata __bss_start _end GLIBC_2.4 GLIBC_2.3.4 GLIBC_2.2.5 /lib64/ld-linux-x86-64.so.2 . @
%@ o `@ ,@ @
< 1` @ ` @ H o @ o o @ o @ o P o `3` o (0` @ P)S; `S; P 0S; `/S; `S; 'S; `n&S; !S; 0`S; `S; *S; (S; 'S; `S; `S; Ќ`S; (S; `S; 0!S; 0(0S; `S; `S; P*S; `b&S; `S; `S; "S; )S; 8*S; P*S; )S; `XS; XS; 2` % p(S; OS; 3` @PS; % L(S; `PS; % M(S; pPS; % (S; xPS; % (S; PS; % (S; PS; % (S; PQS; % p(S; QS; % 'S; QS; % 'S; RS; % ,(S; V; 3` V; % P:(S; 8V; % M(S; V; % (S; ؐV; % p(S; V; % 'S; 8V; % 'S; hV; % ,(S; 0XS; 8XS; @XS; `XS; xXS; xXS; XS; XS; 3` XS; @XS; 3` PXS; `XS; XS; XS; % M(S; 0XS; % @p(S; S; 'S; S; 'S; S; 'S; S; 'S; S; 'S; S; 'S; aulast.debug 3 ELF > @ @ 4 @ 8 @ @ @ @ @ @ @ @ @ @ , , 0 0` 0` ` (0 (0` (0` @ @ D D Ptd ) )@ )@ Qtd @ @ ! <@ < $ 4 o `@ ` @ > @ F @ < N o @ T [ o @ @ j ` @ ` H t @ ~ @ y @ @ %@ % %@ % )@ ) *@ * D 0` 0 0` 0 0` 0 (0` (0 1` 1 1` 1 2` 2 3` 3 ` 3 3 .shstrtab .interp .note.ABI-tag .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .dynamic .got .got.plt .data .bss .gnu_debuglink .dynbss .gnu.liblist .gnu.conflict .gnu.prelink_undo @ @ ! <@ < $ 4 o `@ ` @ > @ o @ P N o @ T [ o @ @ j ` @ ` H t @ ~ @ y @ @ %@ % %@ % )@ ) *@ * D F ,@ , X 0` 0 0` 0 0` 0 (0` (0 1` 1 1` 1 2` 2 3` 3 3` 3 P `3` `3 87 P7 @ )