Which systems is this for? On my Solaris (5.8) machine, there's no lastlog in the man pages or in /var/log/. But we do have a handy utility called "last", which makes this fairly easy:

open(LASTLOG, 'last|') or die "Try Randal's script instead: $!\n";
my %logins;
while (<LASTLOG>) {
    my ($name, $from) = split ' ', $_, 3;
    print unless $from eq 'ftp' or $logins{$name}++;
}
[download]

Or go with the command-line one-liner: last | perl -lane 'print unless $F[1] eq "ftp" or $logins{$F[0]}++' Caveat: there may be other connections you want to exclude besides ftp. Season to taste.