LASTCOMM(1)
NAME
lastcomm - print out information about previously exe-
cuted commands.
SYNOPSIS
lastcomm
[ command-name ... ]
[ user-name ... ]
[ terminal-name ... ]
[ --strict-match ]
[ -f filename | --file filename ]
[ --user name ] [ --command name ] [ --tty name ]
[ --debug ] [ -V | --version ] [ -h | --help ]
DESCRIPTION
lastcomm prints out information about previously executed
commands. If no arguments are specified, lastcomm will
print info about all of the commands in /var/log/pacct
(the record file). If called with one or more of command-
name, user-name, or terminal-name, only records containing
those items will be displayed. For example, to find out
which users used command `a.out' and which users were
logged into `tty0', type:
lastcomm a.out tty0
This will print any entry for which `a.out' or `tty0'
matches in any of the record's fields (command, name, or
terminal). If you want to find only items that match
*all* of the arguments on the command line, you must use
the '-strict-match' option. For example, to list all of
the executions of command a.out by user root on terminal
tty0, type:
lastcomm --strict-match a.out root tty0
The order of the arguments is not important.
For each entry the following information is printed:
+ command name of the process
+ flags, as recorded by the system accounting routines:
S -- command executed by super-user
F -- command executed after a fork but without a
following exec
C -- command run in PDP-11 compatibility mode (VAX
only)
D -- command terminated with the generation of a
core file
X -- command was terminated with the signal
SIGTERM
+ the name of the user who ran the process
+ time the process exited
OPTIONS
--strict-match
Print only entries that match *all* of the argu-
ments on the command line.
--user name
List records for user with name. This is useful if
you're trying to match a username that happens to
be the same as a command (e.g., ed ).
--command name
List records for command name.
--tty name
List records for tty name.
-f filename, --file filename
Read from the file filename instead of
/var/log/pacct
--debug
Print verbose internal information.
-V, --version
Print the version number of lastcomm.
-h, --help
Prints the usage string.
FILES
/var/log/pacct
The system wide process accounting file.
AUTHOR
The GNU accounting utilities were written by Noel Cragg
lt;noel@gnu.ai.mit.edu. The man page was adapted from the
accounting texinfo page by Susan Kleinmann
lt;sgk@sgk.tiac.net.
SEE ALSO
last(1) acct(5)