lastcomm - show last commands executed in reverse order
lastcomm [commandname] ... [username] ... [terminalname] ...
lastcomm gives information on previously executed commands. If no
arguments are specified, lastcomm prints information about all the
commands recorded in the accounting file, /var/adm/pacct during the
current accounting file's lifetime. If called with arguments, only
accounting entries with a matching command name, user name, or
terminal name are printed. For example, to produce a listing of all
executions of commands named a.out by user root on terminal ttyd0 use:
lastcomm a.out root ttyd0
For each process entry, the following are printed.
+ Name of the user who ran the process.
+ Flags, as accumulated by the accounting facilities in the
+ Command name under which the process was called.
+ Amount of cpu time used by the process (in seconds).
+ What time the process started.
Flags are encoded as follows:
S Command was executed by a user who has appropriate
F Command ran after a fork, but without a following exec.
D Command terminated with the generation of a core file.
X Command was terminated with the signal SIGTERM.
/var/adm/pacct current file for per-process accounting
lastcomm was developed by the University of California, Berkeley.
last(1), acct(4), acctsh(1M), core(4).
Hewlett-Packard Company - 1 - HP-UX Release 11i: November 2000