LASTCOMM(1) BSD Reference Manual LASTCOMM(1) NNAAMMEE llaassttccoommmm - show last commands executed in reverse order SSYYNNOOPPSSIISS llaassttccoommmm [--ff _f_i_l_e] [_c_o_m_m_a_n_d _._._.] [_u_s_e_r _._._.] [_t_e_r_m_i_n_a_l _._._.] DDEESSCCRRIIPPTTIIOONN LLaassttccoommmm gives information on previously executed commands. With no ar- guments, llaassttccoommmm prints information about all the commands recorded dur- ing the current accounting file's lifetime. Option: --ff _f_i_l_e Read from _f_i_l_e rather than the default accounting file. If called with arguments, only accounting entries with a matching _c_o_m_m_a_n_d name, _u_s_e_r name, or _t_e_r_m_i_n_a_l name are printed. So, for example: lastcomm a.out root ttyd0 would produce a listing of all the executions of commands named _a_._o_u_t by user _r_o_o_t on the terminal _t_t_y_d_0. For each process entry, the following are printed. ++oo The name of the user who ran the process. ++oo Flags, as accumulated by the accounting facilities in the sys- tem. ++oo The command name under which the process was called. ++oo The amount of cpu time used by the process (in seconds). ++oo The time the process exited. The flags are encoded as follows: ``S'' indicates the command was execut- ed by the super-user, ``F'' indicates the command ran after a fork, but without a following exec, ``C'' indicates the command was run in PDP-11 compatibility mode (VAX only), ``D'' indicates the command terminated with the generation of a _c_o_r_e file, and ``X'' indicates the command was terminated with a signal. FFIILLEESS /var/account/acct Default accounting file. SSEEEE AALLSSOO last(1), sigvec(2), acct(5), core(5) HHIISSTTOORRYY The llaassttccoommmm command appeared in 3.0BSD. 3rd Berkeley Distribution June 6, 1993 1