acct(ADM)                       19 June 1992                       acct(ADM)


 Name

    acct: acctdisk, acctdusg, accton, acctwtmp - overview of accounting and
    miscellaneous accounting commands

 Syntax

    /usr/lib/acct/acctdisk

    /usr/lib/acct/acctdusg [ -u file ] [ -p file ]

    /usr/lib/acct/accton [ file ]

    /usr/lib/acct/acctwtmp "reason"

 Description

    Accounting software is structured as a set of tools (consisting of both C
    programs and shell procedures) that can be used to build accounting sys-
    tems.  When the system is installed, accounting is initially in the
    ``off'' state.  acctsh(ADM) describes the set of shell procedures built
    on top of the C programs.

    Connect time accounting is handled by various programs that write records
    into /etc/utmp, as described in utmp(F).  The programs described in
    acctcon(ADM) convert this file into session and charging records, which
    are then summarized by acctmerg(ADM).

    Process accounting is performed by the UNIX system kernel.  Upon termina-
    tion of a process, one record per process is written to a file (normally
    /usr/adm/pacct).  The programs in acctprc(ADM) summarize this data for
    charging purposes; acctcms(ADM) is used to summarize command usage.
    Current process data may be examined using acctcom(ADM).

    Process accounting and connect time accounting (or any accounting records
    in the format described in acct(FP)) can be merged and summarized into
    total accounting records by acctmerg (see tacct format in acct(FP)).
    prtacct (see acctsh(ADM)) is used to format any or all accounting
    records.

    acctdisk reads lines that contain user ID, login name, and number of disk
    blocks and converts them to total accounting records that can be merged
    with other accounting records.

    acctdusg reads its standard input (usually from find / -print) and com-
    putes disk resource consumption (including indirect blocks) by login.  If
    -u is given, records consisting of those file names for which acctdusg
    charges no one are placed in file (a potential source for finding users
    trying to avoid disk charges).  If -p is given, file is the name of the
    password file.  This option is not needed if the password file is
    /etc/passwd.  (See diskusg(ADM) for more details.)

    accton alone turns process accounting off.  If file is given, it must be
    the name of an existing file to which the kernel appends process account-
    ing records (see acct(S) and acct(FP)).

    acctwtmp writes a utmp(F) record to its standard output.  The record con-
    tains the current time and a string of characters that describe the rea-
    son.  A record type of ACCOUNTING is assigned (see utmp(F)).  reason must
    be a string of 11 or fewer characters, numbers, $, or spaces.  For exam-
    ple, the following are suggestions for use in reboot and shutdown pro-
    cedures, respectively:

       acctwtmp "uname" >> /etc/wtmp
       acctwtmp "file save" >> /etc/wtmp


 Files

    /etc/passwd     used for login name to user ID conversions
    /usr/lib/acct   holds all accounting commands listed in this manual
    /usr/adm/pacct  current process accounting file
    /etc/wtmp       login/logoff history file

 See also

    acct(S), acct(FP), acctcms(ADM), acctcom(ADM), acctcon(ADM),
    acctmerg(ADM), acctprc(ADM), acctsh(ADM), diskusg(ADM), fwtmp(ADM),
    runacct(ADM), utmp(F)

 Standards conformance

    acctdisk is conformant with:

    AT&T SVID Issue 2.

 Value added

    accton is an extension to AT&T System V provided by The Santa Cruz Opera-
    tion, Inc.