[SOLVED] Where does finger info come from in RedHat?

Issue

One of the data elements produced by the finger command gives information on how long a logged in session has been idle. Where does finger get that information from on RedHat? I've looked in /proc/<pid>/ but did not find anything useful, and the documentation doesn't go into the commands implementation.

So, where in the system is finger (or w) pulling this information from?

Solution

The finger program get's this information from utmp file located at /var/run/utmp.

Answered By - KamilCuk

Answer Checked By - Dawn Plyler (WPSolving Volunteer)