acctcom(1M)                                           acctcom(1M)



NAME
     acctcom - searches and formats process accounting files

SYNOPSIS
     acctcom [-a] [-b] [-C sec] [-e time] [-E time] [-f]
     [-g group] [-h] [-H factor] [-i] [-I chars] [-k] [-l line]
     [-m] [-n pattern] [-o ofile] [-O sec] [-q] [-r] [-s time]
     [-S time] [-t] [-u user] [-v] [file]...

ARGUMENTS
     -a   Shows some average statistics about the processes
          selected.  The statistics will be placed after the
          output records.

     -b   Reads backwards, showing latest commands first.  This
          option has no effect when the standard input is read.

     -C sec
          Shows only processes with total CPU time, system plus
          user, exceeding sec seconds.

     -e time
          Selects processes existing at or before time, given in
          the format:  hr[:min[:sec]]

     -E time
          Selects processes ending at or before time.  Using the
          same time for both the -S and -E options shows the
          processes that existed at time.

     -f   Prints the fork/exec flag and system exit status
          columns in the output.

     file Specifies the file to be read.  If no file is
          specified, and if the standard input is associated with
          a terminal or /dev/null (as is the case when using & in
          the shell), /usr/adm/pacct is read; otherwise, the
          standard input is read.

     -g group
          Shows only processes belonging to group.  The group may
          be designated by either the group ID or group name.

     -h   Shows the fraction of total available CPU time consumed
          by the process during its execution, instead of mean
          memory size.  This ``hog factor'' is computed as:

             (total-CPU-time)/(elapsed-time)

     -H factor
          Shows only processes that exceed factor, where factor
          is the ``hog factor,'' as explained in the -h option



January 1992                                                    1

acctcom(1M)                                           acctcom(1M)



          above.

     -i   Prints columns containing the I/O counts in the output.

     -I chars
          Shows only processes transferring more characters than
          the cut-off number given by chars.

     -k   Shows total kcore-minutes, instead of memory size.

     -l line
          Shows only processes belonging to terminal /dev/line.

     -m   Shows the mean core size (the default).

     -n pattern
          Shows only the commands matching pattern.  Replace
          pattern with a regular expression, as in ed(1), except
          that + means one or more occurrences.

     -o ofile
          Copies selected process records in the input data
          format to ofile; suppresses writing on standard output.

     -O sec
          Shows only processes with CPU system time exceeding sec
          seconds.

     -q   Does not produce any output records, just produces the
          average statistics as with the -a option.

     -r   Shows the CPU factor:  (user-time)/(system-time+user-
          time).

     -s time
          Selects processes existing at or after time, given in
          the format:  hr[:min[:sec]].

     -S time
          Selects processes starting at or after time.

     -t   Shows separate system and user CPU times.

     -u user
          Shows only the processes belonging to user that may be
          specified by: a user ID, a login name that is then
          converted to a user ID, a # which designates only those
          processes executed with superuser privileges, or ?
          which designates only those processes associated with
          unknown user IDs.

     -v   Excludes column headings from the output.



2                                                    January 1992

acctcom(1M)                                           acctcom(1M)



DESCRIPTION
     acctcom reads file, the standard input, or /usr/adm/pacct,
     in the form described by acct(4) and writes selected records
     to the standard output.  Each record represents the
     execution of one process.  The output shows:

        COMMAND NAME
        USER
        TTYNAME
        START TIME
        END TIME
        REAL (SEC)
        CPU (SEC)
        MEAN SIZE (K)

     and optionally,

        F STAT
        HOG FACTOR
        KCORE MIN
        CPU FACTOR
        CHARS TRNSFD
        BLOCKS READ

     where F is the fork/exec flag:  1 for fork without exec,
     STAT is the system exit status, and BLOCKS READ is the total
     blocks read and written.

     The command name has a # inserted in front of it if it was
     executed with superuser privileges.  If a process is not
     associated with a known terminal, a ? is placed in the
     TTYNAME field.

     If any arguments are given, they are read in their
     respective order.  Each file is normally read forward, that
     is, in chronological order by process completion time.  The
     file /usr/adm/pacct is usually the current file to be
     examined; a busy system may need several such files, of
     which all but the current file are found in /usr/adm/pacct.

     The acctcom command reports only on processes that have
     terminated; use ps for active processes.

LIMITATIONS
     If time exceeds the present time, then time is interpreted
     as occurring on the previous day.

FILES
     /bin/acctcom
          Executable file
     /etc/passwd
          File containing user IDs



January 1992                                                    3

acctcom(1M)                                           acctcom(1M)



     /usr/adm/pacct
          Account files
     /etc/group
          File containing group IDs

SEE ALSO
     acct(1M), acctcms(1M), acctcon(1M), acctmerg(1M),
     acctprc(1M), acctsh(1M), fwtmp(1M), runacct(1M)

     ksh(1), ps(1), sh(1), su(1) in A/UX Command Reference

     acct(2), acct(4), utmp(4) in A/UX Programmer's Reference











































4                                                    January 1992