LASTCOMM(1) User Commands LASTCOMM(1)

NAME

lastcomm - display the last commands executed, in reverse order

SYNOPSIS

lastcomm [-f file] [-x] [command-name] ... [user-name] ...
[terminal-name] ...

DESCRIPTION

The lastcomm command gives information on previously executed
commands. lastcomm with no arguments displays information about all
the commands recorded during the current accounting file's lifetime.
If called with arguments, lastcomm only displays accounting entries
with a matching command-name, user-name, or terminal-name. If
extended process accounting is active (see acctadm(8)) and is
recording the appropriate data items, lastcomm attempts to take data
from the current extended process accounting file. If standard
process accounting is active, lastcomm takes data from the current
standard accounting file (see acct(2)).


If terminal-name is `- -', there was no controlling TTY for the
process. The process was probably executed during boot time. If
terminal-name is `??', the controlling TTY could not be decoded into
a printable name.


For each process entry, lastcomm displays the following items of
information:

o The command name under which the process was called.

o One or more flags indicating special information about the
process. The flags have the following meanings:


F
The process performed a fork but not an exec.


S
The process ran as a set-user-id program.


o The name of the user who ran the process.

o The terminal which the user was logged in on at the time
(if applicable).

o The amount of CPU time used by the process (in seconds).

o The date and time the process exited.

OPTIONS

The following options are supported:

-f file
Uses file as the source of accounting data. file may be
either an extended process accounting file or a standard
process accounting file.


-x
Uses the currently active extended process accounting
file. If extended processing accounting is inactive, no
output will be produced.

EXAMPLES

Example 1: Listing executions of named commands

The command


example% lastcomm a.out root term/01


produces a listing of all the executions of commands named a.out by
user root while using the terminal term/01.

Example 2: Listing all user commands

The command


example% lastcomm root


produces a listing of all the commands executed by user root.

FILES

/var/adm/pacct
standard accounting file


/var/adm/exacct/proc
extended accounting file

SEE ALSO

last(1), acct(2), acct.h(3HEAD), core(5), attributes(7), acctadm(8)

May 13, 2017 LASTCOMM(1)