lastcomm(1)

NAME

     lastcomm - display the last commands  executed,  in  reverse
     order

SYNOPSIS

     lastcomm [-f file] [-x] [command-name] ...  [user-name]  ...
     [terminal-name] ...

DESCRIPTION

     The lastcomm command gives information  on  previously  exe-
     cuted commands. lastcomm with no arguments displays informa-
     tion about all the  commands  recorded  during  the  current
     accounting   file's  lifetime.  If  called  with  arguments,
     lastcomm only displays accounting entries  with  a  matching
     command-name,  user-name, or terminal-name. If extended pro-
     cess accounting is active (see acctadm(1M)) and is recording
     the  appropriate  data items, lastcomm attempts to take data
     from the current extended process accounting file. If  stan-
     dard  process accounting is active, lastcomm takes data from
     the current standard accounting file (see acct(2)).

     If terminal-name is `- -', there was no controlling TTY  for
     the  process.  The process was probably executed during boot
     time. If  terminal-name is `??', the controlling  TTY  could
     not be decoded into a printable name.

     For each process  entry,  lastcomm  displays  the  following
     items of information:

        o  The command name under which the process was called.

        o  One or more flags indicating special information about
           the process. The flags have the following meanings:

           F     The process performed a fork but not an exec.

           S     The process ran as a set-user-id program.

        o  The name of the user who ran the process.

        o  The terminal which the user was logged in  on  at  the
           time (if applicable).

        o  The amount  of  CPU  time  used  by  the  process  (in
           seconds).

        o  The date and time the process exited.

OPTIONS

     The following options are supported:

     -f  file
           Uses file as the source of accounting data.  file  may
           be  either  an  extended  process accounting file or a
           standard process accounting file.

     -x    Uses the currently active extended process  accounting
           file.  If  extended processing accounting is inactive,
           no output will be produced.

EXAMPLES

     Example 1: Listing executions of named commands

     The command

     example% lastcomm a.out root term/01

     produces a listing of all the executions of  commands  named
     a.out by user root while using the terminal term/01.

     Example 2: Listing all user commands

     The command

     example% lastcomm root

     produces a listing of all  the  commands  executed  by  user
     root.

FILES

      /var/adm/pacct
           standard accounting file

     /var/adm/exacct/proc
           extended accounting file

ATTRIBUTES

     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWesu                     |
    |_____________________________|_____________________________|

SEE ALSO

     last(1), acctadm(1M),  acct(2),  acct(3HEAD),  sigvec(3UCB),
     core(4), attributes(5)