Metadata-Version: 2.1
Name: lastlogcsv
Version: 2.0.0
Summary: Converter from /var/log/lastlog to csv file.
Home-page: https://github.com/Dashstrom/lastlogcsv
Author: Dashstrom
Author-email: dashstrom.pro@gmail.com
License: GPL-3.0 License
Keywords: lastlog,parser,script,forensics,csv
Platform: any
Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.6
Classifier: Programming Language :: Python :: 3.7
Classifier: Programming Language :: Python :: 3.8
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Operating System :: Microsoft :: Windows
Classifier: Operating System :: MacOS
Classifier: Operating System :: POSIX :: Linux
Requires-Python: >=3.6.0
Description-Content-Type: text/markdown
License-File: LICENSE

# Lastlogcsv

[![Tests result](https://github.com/Dashstrom/lastlogcsv/actions/workflows/tests.yml/badge.svg)](https://github.com/Dashstrom/lastlogcsv/actions/workflows/tests.yml)
[![Build result](https://github.com/Dashstrom/lastlogcsv/actions/workflows/publish.yml/badge.svg)](https://github.com/Dashstrom/lastlogcsv/actions/workflows/publish.yml)

Converter from /var/log/lastlog to csv file.

## Install from PyPI

```sh
pip3 install lastlogcsv
```

## Install from Github

```sh
pip3 install git+https://github.com/Dashstrom/lastlogcsv
```

## Usage

You can run the script with `lastlogcsv` or `python3 -m lastlogcsv`

```txt
usage: lastlogcsv [-h] [-i INPUT] [-o OUTPUT] [-s {L,A}] [-e]

Converter file from /var/log/lastlog to csv file.

The output format is `uid,timestamp,tine,host`.
Exemple : `1000,1582898351,pts/0,192.168.56.1`

options:
  -h, --help            show this help message and exit
  -i INPUT, --input INPUT
                        lastlog file, /var/log/lastlog by default on unix system
  -o OUTPUT, --output OUTPUT
                        destination for CSV file
  -s {L,A}, --struct {L,A}
                        'A' for actual struct, 'L' for legacy
  -e, --error           display complete error
```
