acct(5) [v7 man page]

ACCT(5) 							File Formats Manual							   ACCT(5)

NAME

       acct - execution accounting file

SYNOPSIS

       #include <sys/acct.h>

DESCRIPTION

       Acct(2)	causes	entries to be made into an accounting file for each process that terminates.  The accounting file is a sequence of entries
       whose layout, as defined by the include file is:

       If the process does an exec(2), the first 10 characters of the filename appear in ac_comm.  The accounting flag	contains  bits	indicating
       whether exec(2) was ever accomplished, and whether the process ever had super-user privileges.

SEE ALSO

       acct(2), sa(1)

																	   ACCT(5)

acct(5) 							File Formats Manual							   acct(5)

Name
       acct - execution accounting file

Syntax
       #include <sys/acct.h>

Description
       The  system  call makes entries in an accounting file for each process that terminates.	The accounting file is a sequence of entries whose
       layout, as defined by the include file, is:
       typedef u_short comp_t
       struct  acct
       {
	       char    ac_comm[10];   /* Accounting command name */
	       comp_t  ac_utime;      /* Accounting user time */
	       comp_t  ac_stime;      /* Accounting system time */
	       comp_t  ac_etime;      /* Accounting elapsed time */
	       time_t  ac_btime;      /* Beginning time */
	       short   ac_uid;	      /* Accounting user ID */
	       short   ac_gid;	      /* Accounting group ID */
	       short   ac_mem;	      /* average memory usage */
	       comp_t  ac_io;	      /* number of disk IO blocks */
	       dev_t   ac_tty;	      /* control typewriter */
	       char    ac_flag;       /* Accounting flag */
       };

       #define AFORK   0001    /* has executed fork, but no exec */
       #define ASU     0002    /* used super-user privileges */
       #define ACOMPAT 0004    /* used compatibility mode */
       #define ACORE   0010    /* dumped core */
       #define AXSIG   0020    /* killed by a signal */
       #define AHZ     64      /* the accuracy of data is 1/AHZ */

       #ifdef KERNEL
       struct  acct    acctbuf;
       struct  gnode   *acctp;
       #endif
       If the process does an the first 10 characters of the file name appear in ac_comm.  The accounting flag contains  bits  indicating  whether
       was ever accomplished and whether the process ever had superuser privileges.

See Also
       acct(2), execve(2), sa(8)

								       RISC								   acct(5)