lastcomm manpage

Search topic Section

LASTCOMM(1)		    General Commands Manual		   LASTCOMM(1)

       lastcomm -  print out information about previously executed commands.

	      [ command-name ...  ]
	      [ user-name ...  ]
	      [ terminal-name ...  ]
	      [ --strict-match ]
	      [ -f filename | --file filename ]
	      [ --user name ] [ --command name ] [ --tty name ]
	      [ --debug ] [ -pid ] [ -V | --version ] [ -h | --help ]

       lastcomm prints out information about previously executed commands.  If
       no arguments are specified, lastcomm will print info about all  of  the
       commands in acct (the record file).  If called with one or more of com-
       mand-name, user-name, or terminal-name, only records  containing	 those
       items  will  be	displayed.   For example, to find out which users used
       command `a.out' and which users were logged into `tty0', type:
				 lastcomm a.out tty0

       This will print any entry for which `a.out' or `tty0' matches in any of
       the  record's fields (command, name, or terminal).  If you want to find
       only items that match *all* of the arguments on the command  line,  you
       must  use  the '-strict-match' option.  For example, to list all of the
       executions of command a.out by user root on terminal tty0, type:
		       lastcomm --strict-match a.out root tty0

       The order of the arguments is not important.

       For each entry the following information is printed:
	  + command name of the process
	  + flags, as recorded by the system accounting routines:
	       S -- command executed by super-user
	       F -- command executed after a fork but without a following exec
	       C -- command run in PDP-11 compatibility mode (VAX only)
	       D -- command terminated with the generation of a core file
	       X -- command was terminated with the signal SIGTERM
	  + the name of the user who ran the process
	  + time the process started

	      Print only entries that match *all* of the arguments on the com-
	      mand line.

       --user name
	      List  records for user with name.	 This is useful if you're try-
	      ing to match a username that happens to be the same as a command
	      (e.g., ed ).

       --command name
	      List records for command name.

       --tty name
	      List records for tty name.

       -f filename, --file filename
	      Read from the file filename instead of acct

       --pid  add pid of the process and pid of the process parent to the out-
	      put (pid is the last but one and parent pid  the	last  column).
	      These  values  are  shown	 only  when they are generated by acct
	      function (depends on the version of kernel)

	      Print verbose internal information.

       -V, --version
	      Print the version number of lastcomm.

       -h, --help
	      Prints the usage string and default locations of system files to
	      standard output and exits.

	      The  system  wide	 process accounting file. See acct(5) (or pac-
	      ct(5)) for further details.

       The   GNU   accounting	utilities   were   written   by	  Noel	 Cragg
       <noel@gnu.ai.mit.edu>.  The  man	 page  was adapted from the accounting
       texinfo page by Susan Kleinmann <sgk@sgk.tiac.net>.

       last(1), acct(5)

				1995 October 31			   LASTCOMM(1)