lastcomm - display the last commands executed, in reverse order
lastcomm [-f file] [-x] [command-name] ... [user-name] ... [terminal-name] ...
The lastcomm command gives information on previously executed commands. lastcomm with no arguments displays information about all the commands recorded during the current accounting files lifetime. If called with arguments, lastcomm only displays accounting entries with a matching command-name, user-name, or terminal-name. If extended process accounting is active (see acctadm(1M)) and is recording the appropriate data items, lastcomm attempts to take data from the current extended process accounting file. If standard process accounting is active, lastcomm takes data from the current standard accounting file (see acct(2)).
If terminal-name is - -, there was no controlling TTY for the process. The process was probably executed during boot time. If terminal-name is ??, the controlling TTY could not be decoded into a printable name.
For each process entry, lastcomm displays the following items of information:
lastcomm displays the following -->
o The command name under which the process was called.
o One or more flags indicating special information about the process. The flags have the following meanings:
The process performed a fork but not an exec.
The process ran as a set-user-id program.
o The name of the user who ran the process.
o The terminal which the user was logged in on at the time (if applicable).
o The amount of CPU time used by the process (in seconds).
o The date and time the process exited.
The following options are supported:
-f fileUses file as the source of accounting data. file may be either an extended process accounting file or a standard process accounting file.
-xUses the currently active extended process accounting file. If extended processing accounting is inactive, no output will be produced.
Example 1 Listing executions of named commands
example% lastcomm a.out root term/01
produces a listing of all the executions of commands named a.out by user root while using the terminal term/01.
Example 2 Listing all user commands
example% lastcomm root
produces a listing of all the commands executed by user root.
/var/adm/pacctstandard accounting file
/var/adm/exacct/procextended accounting file
See attributes(5) for descriptions of the following attributes:
ATTRIBUTE TYPE ATTRIBUTE VALUE Availability SUNWesu
last(1), acctadm(1M), acct(2), acct.h(3HEAD), sigvec(3UCB), core(4), attributes(5)
|SunOS 5.11||lastcomm (1)||10 Jan 2000|