lastcomm - display the last commands executed, in reverse
lastcomm [-f file] [-x] [command-name] ... [user-name] ...
The lastcomm command gives information on previously exe-
cuted commands. lastcomm with no arguments displays informa-
tion about all the commands recorded during the current
accounting file's lifetime. If called with arguments,
lastcomm only displays accounting entries with a matching
command-name, user-name, or terminal-name. If extended pro-
cess accounting is active (see acctadm(1M)) and is recording
the appropriate data items, lastcomm attempts to take data
from the current extended process accounting file. If stan-
dard process accounting is active, lastcomm takes data from
the current standard accounting file (see acct(2)).
If terminal-name is `- -', there was no controlling TTY for
the process. The process was probably executed during boot
time. If terminal-name is `??', the controlling TTY could
not be decoded into a printable name.
For each process entry, lastcomm displays the following
items of information:
o The command name under which the process was called.
o One or more flags indicating special information about
the process. The flags have the following meanings:
F The process performed a fork but not an exec.
S The process ran as a set-user-id program.
o The name of the user who ran the process.
o The terminal which the user was logged in on at the
time (if applicable).
o The amount of CPU time used by the process (in
o The date and time the process exited.
The following options are supported:
Uses file as the source of accounting data. file may
be either an extended process accounting file or a
standard process accounting file.
-x Uses the currently active extended process accounting
file. If extended processing accounting is inactive,
no output will be produced.
Example 1: Listing executions of named commands
example% lastcomm a.out root term/01
produces a listing of all the executions of commands named
a.out by user root while using the terminal term/01.
Example 2: Listing all user commands
example% lastcomm root
produces a listing of all the commands executed by user
standard accounting file
extended accounting file
See attributes(5) for descriptions of the following attri-
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
| Availability | SUNWesu |
last(1), acctadm(1M), acct(2), acct(3HEAD), sigvec(3UCB),
Man(1) output converted with