utmp shows who is currently logged in user. wtmp shows all the history of logged in and logout both of them are binary so in order to see in human readilbe format we need to use last command dmesg = print or control the kernel ring buffer. kernel ring bufffer = rsyslogd = reliable and extended syslogd , is a system utility providing support for message logging. who writes these log file? rsylogd..
