acctcom(8) CLIX acctcom(8)
NAME
acctcom - Searches for and displays process accounting files
SYNOPSIS
acctcom [flag ... ] [file ... ]
FLAGS
-a Shows average statistics about the selected processes. The
statistics are displayed after the output records.
-b Reads backwards, showing latest commands first. This flag
has no effect when a stdin file is read.
-f Displays the fork() or exec() flag and system exit status
columns. The numeric output for this flag is in octal
numbers.
-h Shows the fraction of the total available CPU time consumed
by the process during execution instead of showing mean
memory size. This fraction is computed as follows:
(total CPU time) / (elapsed time)
-i Displays columns containing the I/O counts.
-k Shows total kcore-minutes instead of showing memory size.
-m Shows mean core size. This is the default.
-r Shows CPU factor. This is computed as follows:
(user time / (system time + user time)).
-t Shows separate systems and user CPU times.
-v Excludes column headings from the output.
-l line Shows only processes belonging to terminal /dev/line.
-u user Shows only processes, belonging to a user, specified by one
of the following: a user ID, a login name that is converted
to a user ID, a # which designates only those processes
executed with superuser privileges, or a ?, which designates
only processes associated with unknown user IDs.
-g group Shows only the processes belonging to the specified group.
2/94 - Intergraph Corporation 1
acctcom(8) CLIX acctcom(8)
The group may be designated by either the group ID or the
group name.
-s time Selects processes existing at or after time given. Specifies
the time in the format hr[:min[:sec]].
-e time Selects processes existing at or before the specified time.
-S time Selects processes starting at or after the specified time.
-E time Selects processes ending at or before the specified time.
Using the same time for both the -S and -E flags shows the
processes that existed at the specified time.
-n pattern Shows only commands matching the specified pattern. This
pattern may be a regular expression, as in ed(1) except that
the plus sign (+) means one or more occurrences.
-q Does not display any output records; displays only the
average statistics as with the -a flag.
-o ofile Copies selected process records in the input data format to
ofile; suppresses stdout displaying.
-H factor Shows only processes that exceed factor, which is the CPU
fraction as explained in the -h flag above.
-O sec Shows only processes with CPU system time exceeding the
specified number of seconds.
-C sec Shows only processes with total CPU time, system plus user,
exceeding the specified number of seconds.
-I chars Shows only processes transferring more characters than the
specified number of characters.
DESCRIPTION
The acctcom command reads the specified files, which are stdin files or
/usr/adm/pacct files in the form described by acct(4), and writes selected
records to a stdout file. Each record represents the execution of one
process. The output shows the command name, user, tty name, start time,
end time, real time in seconds, CPU time in seconds, mean size in
kilobytes, and F (the fork()/exec() flag): 1 for fork() without exec()),
the system exit status, the fraction of CPU consumed (the hog factor),
kcore-minutes (see acctcms(8)), CPU factor, characters transferred and the
total blocks read and written.
A number sign # is prepended to the command name if the command executes
with superuser privileges. If a process is not associated with a known
terminal, a question mark ? is displayed in the TTYNAME field.
2 Intergraph Corporation - 2/94
acctcom(8) CLIX acctcom(8)
If no files are specified and if stdin is associated with a terminal or
/dev/null (as is the case when using & in the shell), the /usr/adm/pacct
file is read. Otherwise, stdin file is read.
If any file arguments are given, they are read in their respective order.
Each file is normally read in chronological order by process completion
time. The /usr/adm/pacct file is usually the current file to be examined.
A busy system may need several such files, of which all but the current
file are found in /usr/adm/pacct?.
EXAMPLES
This example displays all the processes that have completed for the user
mario after 3:00 pm.
acctcom -s 15:00 -u mario -h
FILES
/etc/passwd Used for login name to user ID conversions.
/usr/adm/pacct Current process accounting file.
/etc/group Group ID information.
CAUTIONS
The acctcom command reports only on processes that have terminated; use
the ps command for active processes. If the specified time exceeds the
present time, the specified time is interpreted as occurring on the
previous day.
DIAGNOSTICS
The acctcom command displays out an error message if there is a problem
with any of the command line arguments.
EXIT VALUES
If there is a problem with the command line arguments, acctcom exits with
a value of 1.
RELATED INFORMATION
Commands: acct(8), acctcms(8), acctcon(8), acctmerg(8), acctprc(8),
acctsh(8), fwtmp(8), runacct(8)
Functions: acct(2)
Files: acct(4), utmp(4)
2/94 - Intergraph Corporation 3