accounting: lastcomm

1 
1 3 `lastcomm'
1 ************
1 
1 `lastcomm' prints out information about previously executed commands.
1 If no arguments are specified, `lastcomm' will print info about all of
1 the commands in the `acct' file (the record file).  If called with a
1 command name, user name, or tty name, only records containing those
1 items will be displayed.  For example, to find out which users used
1 command `a.out' and which users were logged into `tty0', type:
1 
1    `lastcomm a.out tty0'
1 
1    This will print any entry for which `a.out' or `tty0' matches in any
1 of the record's fields (command, name, or tty).  If you want to find
1 only items that match ALL of the arguments on the command line, you
1 must use the '-strict-match' option.  For example, to list all of the
1 executions of command `a.out' by user `root' on terminal `tty0', type:
1 
1    `lastcomm --strict-match a.out root tty0'
1 
1    The order of the arguments is not important.
1 
1    For each entry the following information is printed:
1 
1    * command name of the process
1 
1    * flags, as recorded by the system accounting routines:
1         - *S* command executed by super-user
1 
1         - *F* command executed after a fork but without a following exec
1 
1         - *C* command run in PDP-11 compatibility mode (VAX only)
1 
1         - *D* command terminated with the generation of a core file
1 
1         - *X* command was terminated with the signal SIGTERM
1 
1    * the name of the user who ran the process
1 
1    * time the process exited
1 
1 3.1 Flags
1 =========
1 
1 This program implements the features of regular u*x `lastcomm' with a
1 few extra flags.  When `lastcomm' is invoked without arguments, the
1 output looks like this:
1      nslookup         jberman  ttypb      0.03 secs Tue Feb 16 19:23
1      comsat           root     __         0.03 secs Tue Feb 16 19:19
1      uptime           ctilburg __         0.11 secs Tue Feb 16 19:23
1      sh          F    ctilburg __         0.02 secs Tue Feb 16 19:23
1      sleep            ctilburg __         0.02 secs Tue Feb 16 19:22
1      ls               noel     ttyp4      0.19 secs Tue Feb 16 19:23
1 
1 `--strict-match'
1      Print only entries that match _all_ of the arguments on the command
1      line.
1 
1 `--user NAME'
1      List records for user with NAME.  This is useful if you're trying
1      to match a username that happens to be the same as a command (e.g.,
1      `ed').
1 
1 `--command NAME'
1      List records for command NAME.
1 
1 `--tty NAME'
1      List records for tty NAME.
1 
1 `-f FILENAME'
1 `--file FILENAME'
1      Read from the file FILENAME instead of the system's `acct' file.
1 
1 `--ahz HZ'
1      Use this flag to tell the program what `AHZ' should be (in hertz).
1      This option is useful if you are trying to view an `acct' file
1      created on another machine which has the same byte order and file
1      format as your current machine, but has a different value for
1      `AHZ'.
1 
1 `-p'
1 `--show-paging'
1      Print paging statistics
1 
1 `--debug'
1      Print verbose internal information.
1 
1 `--version'
1      Print `lastcomm''s version number.
1 
1 `--help'
1      Print `lastcomm''s usage string and default locations of system
1      files to standard output.
1