LASTCOMM(1)

NAME
lastcomm - show the last commands executed, in reverse order

SYNOPSIS
lastcomm [ command-name ] ... [ user-name ] ... [ terminal-name ] ...

DESCRIPTION

lastcomm gives information on previously executed commands. lastcomm with no arguments displays information about all the commands recorded during the current accounting file's lifetime. If called with arguments, lastcomm displays only accounting entries with a matching command-name, user-name, or terminal-name.

EXAMPLES

The command

    example% lastcomm a.out root ttyd0

would produce a listing of all the executions of commands named a.out, by user root while using the terminal ttyd0.

    example% lastcomm root

would produce a listing of all the commands executed by user root.

For each process entry, lastcomm displays the following information:

    •   The command name under which the process was called.

    •   One or more flags indicating special information about the process. The flags have the following meanings:

        F   The process performed a fork but not an exec.

        S   The process ran as a set-user-id program.

        D   The process dumped memory.

        X   The process was killed by some signal.

    •   The name of the user who ran the process.

    •   The terminal from which the user was logged in at the time (if applicable).

    •   The amount of CPU time used by the process (in seconds).

    •   The date and time the process starts.

FILES
/var/adm/pacct
    accounting file

SEE ALSO
last(1), sigvec(2), acct(5), core(5)