lastcomm.1 (2010 09)

l
lastcomm(1) lastcomm(1)
NAME
lastcomm - show last commands executed in reverse order
SYNOPSIS
lastcomm [commandname ] ... [username ] ... [terminalname ] ...
DESCRIPTION
lastcomm gives information on previously executed commands. If no arguments are specified,
lastcomm prints information about all the commands recorded in the accounting file,
/var/adm/pacct
during the current accounting file’s lifetime. If called with arguments, only account-
ing entries with a matching command name, user name, or terminal name are printed. For example, to
produce a listing of all executions of commands named
a.out by user root on terminal ttyd0 use:
lastcomm a.out root ttyd0
For each process entry, the following are printed.
• Name of the user who ran the process.
• Flags, as accumulated by the accounting facilities in the system.
• Command name under which the process was called.
• Amount of cpu time used by the process (in seconds).
• What time the process started.
Flags are encoded as follows:
S Command was executed by a user who has appropriate privileges.
F Command ran after a fork, but without a following exec .
D Command terminated with the generation of a core file.
X Command was terminated with the signal SIGTERM.
AUTHOR
lastcomm was developed by the University of California, Berkeley.
FILES
/var/adm/pacct current file for per-process accounting
SEE ALSO
last(1), acct(4), acctsh(1M), core(4).
HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1