NAME

acct − execution accounting file

SYNOPSIS

#include <sys/acct.h>

DESCRIPTION

Acct(2) causes entries to be made into an accounting file for each process that terminates. The accounting file is a sequence of entries whose layout, as defined by the include file is:

/*
 * Accounting structures
 */
 typedefunsigned short comp_t;/* "floating pt": 3 bits base 8 exp, 13 bits fraction */
structacct
{
charac_comm[10];/* Accounting command name */
comp_tac_utime;/* Accounting user time */
comp_tac_stime;/* Accounting system time */
comp_tac_etime;/* Accounting elapsed time */
time_tac_btime;/* Beginning time */
shortac_uid;/* Accounting user ID */
shortac_gid;/* Accounting group ID */
shortac_mem;/* average memory usage */
comp_tac_io;/* number of disk IO blocks */
dev_tac_tty;/* control typewriter */
charac_flag;/* Accounting flag */
};
  #defineAFORK01 /* has executed fork, but no exec */
#defineASU02/* used super-user privileges */

If the process does an exec(2), the first 10 characters of the filename appear in ac_comm.  The accounting flag contains bits indicating whether exec(2) was ever accomplished, and whether the process ever had super-user privileges.

SEE ALSO

acct(2), sa(1)

7th Edition