UNIX for Dummies Questions & Answers

When i run #acctadm command it shows it as inactive but /var/adm/pacct file has todays date such as

Code:

 -rw-r--r--   1 adm      adm      182397160 Mar 25 15:48 pacct

# acctadm
Task accounting: inactive
Task accounting file: none
Tracked task resources: none
Untracked task resources: extended,host,mstate
Process accounting: inactive
Process accounting file: none
Tracked process resources: none
Untracked process resources: extended,host,mstate

where do I need to look what process is writing to this file please advise.

Thanks

any one with an answer

why why don't you take a look at the fuser command man page

Following is the out put from this command

root:/var/adm$ fuser /var/adm/pacct
/var/adm/pacct:

try

Code:

 
fuser -cu /var/adm/pacct

this will give you the process and the user name in the paranthesis
go throught the man page read the diff option of fuser

I don't have a SUNOS system handy but isn't "acctadm" for Extended Accounting?
On my HP-UX system the following configuration text file turns unix Process Accounting on/off.
/etc/rc.config.d/acct
The actual processes are usually started in a rc2 script containing "/usr/sbin/acct/startup" and "/usr/sbin/acct/shutacct"
See
man acct
A "pacct" file on a busy system can get very large and I have yet to find a use for the data so I routinely turn off Process Accounting.
Hope this helps.