LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   How can I find the last time a particular USB device was connected? (https://www.linuxquestions.org/questions/linux-security-4/how-can-i-find-the-last-time-a-particular-usb-device-was-connected-4175446698/)

robot79 01-22-2013 01:57 AM

How can I find the last time a particular USB device was connected?
 
I'm trying to piece together when I last used a USB flash drive which I've lost. If I can find when I last had it, it may help point to where I should be searching. Thanks!

tsester 01-22-2013 04:22 AM

depending on your OS, you can grep something from either /var/log/syslog or /var/log/messages or through journalctl.
to see older messages, check for /var/log/syslog.1 or /var/log/messages.1 or /var/log/syslog.1.gz or...
type
Code:

ls /var/log/
to see all these logs

to read a log you can use
Code:

less
(if the log ends with .gz you can use
Code:

zless
) . in there, type '/' to enter a search string. in there, type '-i' to change case (in)sensitive search.

at all times, you can use
Code:

man less


All times are GMT -5. The time now is 12:20 AM.