NAME
lastcomm — show last commands executed in reverse order
SYNOPSIS
lastcomm
[commandname] ...
[username] ...
[terminalname] ...
DESCRIPTION
lastcomm
gives information on previously executed commands.
If no arguments are specified,
lastcomm
prints information about all the commands
recorded in the accounting file,
/var/adm/pacct
during the current accounting file's lifetime.
If called with arguments,
only accounting entries with a matching command name,
user name, or terminal name are printed.
For example, to produce a listing of all executions of commands named
a.out
by user
root
on terminal
ttyd0
use:
lastcomm a.out root ttyd0
For each process entry, the following are printed.
Name of the user who ran the process.
Flags, as accumulated by the accounting facilities in the system.
Command name under which the process was called.
Amount of cpu time used by the process (in seconds).
What time the process started.
Flags are encoded as follows:
- S
Command was executed by a user who has appropriate privileges.
- F
Command ran after a fork, but without a following
exec.
- D
Command terminated with the generation of a
core
file.
- X
Command was terminated with the signal
SIGTERM.
AUTHOR
lastcomm
was developed by the University of California, Berkeley.
FILES
- /var/adm/pacct
current file for per-process accounting
Printable version
