12-16-2004
Depending on the accounting available on your system try
lastcomm
Cheers
ZB
10 More Discussions You Might Find Interesting
1. SCO
:D Hi, I'm searching for a command or commands to see the user and programs activity and who much resources is in use. In Unix I remember a TOP command but in SCO I'm don't find a similar. My system is a UNIX SCO 5.6 Thank's (1 Reply)
Discussion started by: DigitalExecutiv
1 Replies
2. AIX
What is the best way to logoff users from my Unix system? I have done a search and found that you can do a w or who - find who is on, and ps-ef | grep <user> and kill their processes. But what if you have a bunch of users and you need them off the system quickly? Killing individual processes... (1 Reply)
Discussion started by: outtacontrol
1 Replies
3. Solaris
I am looking for solutions to address my need to log to a file whenever a user logs out or session disconnects. (1 Reply)
Discussion started by: mhm4
1 Replies
4. UNIX for Advanced & Expert Users
We installed ssh on our AIX 5.3 box. The issue we are facing is that we dont get the users listed when we use 'w' or 'who'. After going through google without success, checked the www.openssh.org site. The FAQ section posted the solution that -
How do I go about this? Has anyone faced an issue... (2 Replies)
Discussion started by: ranj@chn
2 Replies
5. UNIX for Dummies Questions & Answers
Hi all,
Well I've had a bit more experience with Unix-like environments since my last post, now that I have started working on my website in earnest and am doing much of the file manipulation via the command line through SSH.
The thing is, I want to be able to log all console activity,... (4 Replies)
Discussion started by: patwa
4 Replies
6. AIX
Is there a tool or application the will audit users activity? I've tryed to use audit the comes with AIX but to gathers so much information it is near impossible to see what they are doing. I just want to monitor logins and and files they create or change. (9 Replies)
Discussion started by: daveisme
9 Replies
7. Solaris
I would like to know how to prevent users connecting to a server using SSH as root.
I would still like them to be able to login with their username and then change to su.
But I would like to prevent them logging in directly as root.
I have searched the forum and read that I should set... (3 Replies)
Discussion started by: Sepia
3 Replies
8. Shell Programming and Scripting
Hi,
How do force users to log off Unix through shell? (2 Replies)
Discussion started by: Wahmed9
2 Replies
9. Solaris
We recently underwent a security audit and have a new requirement to not allow users to stay logged on overnight. In order to place this policy into effect i need a way to check for idle users and log them off. Is there any good way to enforce this policy in Solaris 10 and make it work in such a... (11 Replies)
Discussion started by: goose25
11 Replies
10. Red Hat
Hi, I need to log the activity of my SFTP (RHEL 5.4).
I have this in /etc/sshd/sshd_config:
Subsystem sftp /usr/libexec/openssh/sftp-server -f LOCAL5 -l VERBOSE
And this in /etc/syslog.conf:
LOCAL5.* /var/log/sftp.log
When I log in... (1 Reply)
Discussion started by: Tr0cken
1 Replies
LEARN ABOUT FREEBSD
lastcomm
LASTCOMM(1) BSD General Commands Manual LASTCOMM(1)
NAME
lastcomm -- show last commands executed
SYNOPSIS
lastcomm [-EScesu] [-f file] [+format] [command ...] [user ...] [terminal ...]
DESCRIPTION
The lastcomm utility gives information on previously executed commands. With no arguments, lastcomm prints information about all the com-
mands recorded during the current accounting file's lifetime.
The following options are available:
-E Print the time the process exited.
-S Print the time the process started.
-c Print the amount of cpu time used by the process.
-e Print the amount of elapsed time used by the process.
-s Print the amount of system time used by the process.
-u Print the amount of user time used by the process.
-f file
Read from file rather than the default /var/account/acct. If file is a single dash ('-') lastcomm reads accounting entries from the
standard input.
An operand with a leading plus sign ('+') is followed a user-defined format string which specifies the format in which to display the
process's start or exit date and time. The format string may contain any of the conversion specifications described in the strftime(3) man-
ual page, as well as arbitrary text.
If no options are specified, -cS is assumed. If lastcomm is invoked with arguments, only accounting entries with a matching command name,
user name, or terminal name are printed. For example:
lastcomm a.out root ttyd0
would produce a listing of all the executions of commands named a.out by user root on the terminal ttyd0.
For each process entry, the following are printed.
o The name of the user who ran the process.
o Flags, as accumulated by the accounting facilities in the system.
o The command name under which the process was called.
o The amount of CPU (-c), wall (-e), system (-s), or user (-u) time used by the process (in seconds).
o The time the process started (-S) or exited (-E).
The flags are encoded as follows: ``S'' indicates the command was executed by the super-user, ``F'' indicates the command ran after a fork,
but without a following exec(3), ``D'' indicates the command terminated with the generation of a core file, and ``X'' indicates the command
was terminated with a signal.
By default, accounting entries are printed going backwards in time, starting from the time lastcomm was executed. However, if lastcomm reads
entries from its standard input, then entries are printed in the order they are read.
FILES
/var/account/acct default accounting file
EXAMPLES
The command
lastcomm -Ee
will print the exit time and elapsed time of each command logged in /var/account/acct, while
tail -f -c 0 /var/account/acct | lastcomm -f -
will print details of each terminating command.
SEE ALSO
last(1), sigaction(2), strftime(3), acct(5), core(5)
HISTORY
The lastcomm command appeared in 3.0BSD.
BSD
May 17, 2012 BSD