|
The acctcom utility reads filenames, the standard input, or /var/adm/pacct, in the form described by acct(3HEAD) and writes selected records to standard output. Each record represents the execution of
one process. The output shows the COMMAND NAME, USER, TTYNAME, START TIME, END TIME, REAL (SEC), CPU (SEC), MEAN SIZE (K), and optionally, F (the fork()/exec() flag: 1 for fork() without exec()), STAT (the system exit status), HOG FACTOR, KCORE MIN, CPU FACTOR, CHARS TRNSFD, and BLOCKS READ (total blocks read and written).
A `#' is prepended to the command name if the command was executed with super-user privileges. If a process is not associated with a known terminal, a `?' is
printed in the TTYNAME field.
If no filename is specified, and if the standard input is associated with a terminal or /dev/null (as is the case when using `&'
in the shell), /var/adm/pacct is read; otherwise, the standard input is read.
If any filename arguments are given, they are read in their respective order. Each file is normally read forward, that is, in chronological order by process completion time.
The file /var/adm/pacct is usually the current file to be examined; a busy system may need several such files of which all but the current file are found in /var/adm/pacctincr.
|