l
lastcomm(1) | lastcomm(1) |
NAME
lastcomm - show last commands executed in reverse order
SYNOPSIS
lastcomm [commandname] ... [username] ... [terminalname] ...
DESCRIPTION
lastcomm gives information on previously executed commands. If no arguments are speci®ed, lastcomm prints information about all the commands recorded in the accounting ®le, /var/adm/pacct during the current accounting ®le's lifetime. If called with arguments, only accounting entries with a matching command name, user name, or terminal name are printed. For example, to produce a listing of all executions of commands named a.out by user root on terminal ttyd0 use:
lastcomm a.out root ttyd0
For each process entry, the following are printed.
∙Name of the user who ran the process.
∙Flags, as accumulated by the accounting facilities in the system.
∙Command name under which the process was called.
∙Amount of cpu time used by the process (in seconds).
∙What time the process started.
Flags are encoded as follows:
SCommand was executed by a user who has appropriate privileges.
FCommand ran after a fork, but without a following exec.
DCommand terminated with the generation of a core ®le.
X Command was terminated with the signal SIGTERM.
FILES
/var/adm/pacct current ®le for
AUTHOR
lastcomm was developed by the University of California, Berkeley.
SEE ALSO
last(1), acct(4), acctsh(1M), core(4).
Section 1−422 | − 1 − |