usr/share/man/cat5/acct.0



ACCT(5)                       1986                        ACCT(5)


N\bNA\bAM\bME\bE
     acct - execution accounting file

S\bSY\bYN\bNO\bOP\bPS\bSI\bIS\bS
     #\b#i\bin\bnc\bcl\blu\bud\bde\be <\b<s\bsy\bys\bs/\b/a\bac\bcc\bct\bt.\b.h\bh>\b>

D\bDE\bES\bSC\bCR\bRI\bIP\bPT\bTI\bIO\bON\bN
     The _\ba_\bc_\bc_\bt(2) system call arranges for entries to be made in
     an accounting file for each process that terminates.  The
     accounting file is a sequence of entries whose layout, as
     defined by the include file is:

     /*
      * Copyright (c) 1982, 1986 Regents of the University of California.
      * All rights reserved.  The Berkeley software License Agreement
      * specifies the terms and conditions for redistribution.
      *
      *      @(#)acct.h              7.2 (Berkeley) 5/9/89
      */

     /*
      * Accounting structures;
      * these use a comp_t type which is a 3 bits base 8
      * exponent, 13 bit fraction ``floating point'' number.
      * Units are 1/AHZ seconds.
      */
     typedef u_short comp_t;

     struct  acct
     {
             char     ac_comm[10];   /* Accounting command name */
             comp_t   ac_utime;      /* Accounting user time */
             comp_t   ac_stime;      /* Accounting system time */
             comp_t   ac_etime;      /* Accounting elapsed time */
             time_t   ac_btime;      /* Beginning time */
             uid_t    ac_uid;        /* Accounting user ID */
             gid_t    ac_gid;        /* Accounting group ID */
             short    ac_mem;        /* average memory usage */
             comp_t   ac_io;         /* number of disk IO blocks */
             dev_t    ac_tty;        /* control typewriter */
             char     ac_flag;       /* Accounting flag */
     };

     #define AFORK    0001           /* has executed fork, but no exec */
     #define ASU      0002           /* used super-user privileges */
     #define ACOMPAT  0004           /* used compatibility mode */
     #define ACORE    0010           /* dumped core */
     #define AXSIG    0020           /* killed by a signal */

     /*
      * 1/AHZ is the granularity of the data encoded in the various
      * comp_t fields.  This is not necessarily equal to hz.


Printed 7/27/90                May                              1


ACCT(5)                       1986                        ACCT(5)


      */
     #define AHZ 64

     #ifdef KERNEL
     struct  vnode    *acctp;
     #endif

     If the process was created by an _\be_\bx_\be_\bc_\bv_\be(2), the first 10
     characters of the filename appear in _\ba_\bc__\bc_\bo_\bm_\bm. The accounting
     flag contains bits indicating whether _\be_\bx_\be_\bc_\bv_\be(2) was ever
     accomplished, and whether the process ever had super-user
     privileges.

S\bSE\bEE\bE A\bAL\bLS\bSO\bO
     acct(2), execve(2), sa(8)


Printed 7/27/90                May                              2