Active Login Session Monitor

By TC Studio

View on Snapcraft.io
Version1.0.0
Revision1
Size157.1 MB
LicenseMIT
Confinementstrict
Basecore22

Active TTY/PTS login session, utmp/wtmp & systemd session viewer

ScreenshotScreenshotScreenshot

Active Login Session Monitor is a desktop login session viewer and historical
utmp/wtmp record inspector for Linux workstations and multi-user hosts.
An independent Linux alternative to command-line logged-on session utilities
such as PsLoggedOn, who, w, and last, it decodes binary utmp and wtmp records
alongside live systemd-logind seats and /proc POSIX session groups.

Key Features:
- Binary utmp & wtmp Struct Decoder: Parses native 384-byte x8664 Linux utmp
and wtmp records from /run/utmp and /var/log/wtmp, including USER
PROCESS,
LOGINPROCESS, DEADPROCESS, RUNLVL, and BOOTTIME entries.
- Live systemd & /proc Session Grouping: Combines /run/systemd/sessions metadata
with /proc/<pid>/stat POSIX session leaders (SID), controlling TTY/PTS devices,
and loginuid values so active console, SSH, and WSL sessions are always visible.
- Remote Host & Duration Tracking: Displays TTY/PTS line, seat/type, remote IP or
hostname, exact start timestamp, and elapsed session duration.
- Session Timeline & Reports: Renders a visual session activity timeline and user
breakdown chart and exports active and historical session tables to CSV and JSON.

Disclaimer: This project is an independent open-source tool and is not affiliated with, sponsored by, or endorsed by Microsoft Corporation.

Update History

1.0.0 (1)
14 Nov 2026, 04:30 UTC

Published14 Nov 2026, 04:00 UTC

Last updated14 Nov 2026, 03:57 UTC

First seen14 Nov 2026, 04:30 UTC