Date: Sun, 31 Dec 2000 10:06:25 -0600 (CST) From: Guy Helmer <ghelmer@palisadesys.com> To: Jahanur R Subedar <jahanur@jjsoft.com> Cc: freebsd-questions@FreeBSD.ORG, freebsd-isp@FreeBSD.ORG Subject: Re: How to find the time.... Message-ID: <Pine.LNX.4.21.0012311000570.17603-100000@magellan.palisadesys.com> In-Reply-To: <Pine.BSF.3.96.1001231094202.15921A-100000@runner>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 31 Dec 2000, Jahanur R Subedar wrote: > Hi Folks, > I am trying to find the time of when a particular command was executed. > We ussually use c shell and the history command only tells the what > command was executed. It is important for us to find the time of a > particular user when it was executed. Is there any log file foruser > activity or this kind. > Or Is there anyway to find this? If you have process accounting enabled (accounting="YES" in /etc/rc.conf), each program executed is logged in the binary file /var/account/acct (which is automatically rotated dailiy). Information in the acct file may be listed with the lastcomm(1) command. Note that the information may not be as trustworthy as it appears. For example, a user may create a symbolic link pointing to a program, and the program name recorded in lastcomm will be the name of the link, not that name of the actual program executed. Guy -- Guy Helmer, Ph.D. Sr. Software Engineer, Palisade Systems --- ghelmer@palisadesys.com http://www.palisadesys.com/~ghelmer To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.21.0012311000570.17603-100000>