Display Filter Reference: Who
Protocol field name: who
Versions: 1.0.0 to 2.6.1
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| who.boottime | Boot Time | Date and time | 1.0.0 to 2.6.1 |
| who.entry | Who utmp Entry | Label | 1.8.0 to 2.6.1 |
| who.hostname | Hostname | Character string | 1.0.0 to 2.6.1 |
| who.idle | Time Idle | Unsigned integer, 4 bytes | 1.0.0 to 2.6.1 |
| who.loadav_10 | Load Average Over Past 10 Minutes | Floating point (double-precision) | 1.0.0 to 2.6.1 |
| who.loadav_15 | Load Average Over Past 15 Minutes | Floating point (double-precision) | 1.0.0 to 2.6.1 |
| who.loadav_5 | Load Average Over Past 5 Minutes | Floating point (double-precision) | 1.0.0 to 2.6.1 |
| who.recvtime | Receive Time | Date and time | 1.0.0 to 2.6.1 |
| who.sendtime | Send Time | Date and time | 1.0.0 to 2.6.1 |
| who.timeon | Time On | Date and time | 1.0.0 to 2.6.1 |
| who.tty | TTY Name | Character string | 1.0.0 to 2.6.1 |
| who.type | Type | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| who.uid | User ID | Character string | 1.0.0 to 2.6.1 |
| who.vers | Version | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| who.whoent | Who utmp Entry | Label | 1.0.0 to 1.6.16 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ NetShark appliance
- • Troubleshoot problems faster
- • Quickly identify the applications running on your network
- • Monitor your virtual machine traffic