if you do a 'man' on 'last' it has an ugly typo interchanging options
-T
and
-t

which are NOT the same. If you follow the example for -t your output
will be incorrect. in fact, if you use -T your output i believe may
still be different than explained.

this is especially evident in the poor wtmp handling caused by
excessive log ins when lines stop wrapping. ie;

sapftp ftp sapapd.blah.com Sep 17 11:17 - 11:17
(00:00
)
sapftp ftp sapapd.blah.com Sep 17 11:17 sapftp
ftp
sapffd.blah.com Sep 17 11:17 sapftp ftp
sapffd.