HPUX acctcom[1m]
acctcom(1M) acctcom(1M)
NAME
acctcom - search and print process accounting file(s)
SYNOPSIS
/usr/lib/acct/acctcom [[options][file]] . . .
DESCRIPTION
acctcom reads file, the standard input, or /usr/adm/pacct, in the form
described by acct(4) and writes selected records to the standard
output. Each record represents the execution of one process. The
output shows the COMMAND NAME, USER, TTYNAME, START TIME, END TIME,
REAL (SECS), CPU (SECS), MEAN SIZE(K), and optionally, F (the
fork/exec flag: 1 for fork without exec), STAT (the system exit
status), HOG FACTOR, KCORE MIN, CPU FACTOR, CHARS TRNSFD, and BLOCKS
READ (total blocks read and written).
The command name is preceded by a # if it was executed with super-user
privileges. If a process is not associated with a known terminal, a ?
is printed in the TTYNAME field.
The system exit status is 0 if the process terminated by calling exit.
If it is not 0, it is the signal number that caused the process to
terminate. If a core file image was produced as a result of the
signal (see signal(5)), it is the signal number plus 0200.
If no files are specified, and if the standard input is associated
with a terminal or /dev/null (as is the case when using & in the
shell), /usr/adm/pacct is read; otherwise, the standard input is read.
If any file arguments are given, they are read in their respective
order. Each file is normally read forward; i.e., in chronological
order by process-completion time. The file /usr/adm/pacct is usually
the current file to be examined; a busy system may need several such
files of which all but the current file are found in /usr/adm/pacct?.
The options are:
-a Show some average statistics about the processes
selected. Statistics are printed after the output
records.
-b Read backwards, showing latest commands first.
This option has no effect when the standard input
is read.
-f Print in octal the fork/exec flag and system exit
status columns in the output.
-h Instead of mean memory size, show the fraction of
total available CPU time consumed by the process
during its execution. This ``hog factor'' is
computed as:
Hewlett-Packard Company - 1 - HP-UX Release 9.0: August 1992
acctcom(1M) acctcom(1M)
"total CPU time" over "elapsed time"
-i Print columns containing the I/O counts in the
output.
-k Instead of memory size, show total kcore-minutes.
-m Show mean core size (the default).
-r Show CPU factor (user time/(system-time + user-
time).
-t Show separate system and user CPU times.
-v Exclude column headings from the output.
-l line Show only processes belonging to terminal
/dev/line.
-u user Show only processes belonging to user that can be
specified by: a user ID, a login name that is then
converted to a user ID, a # which designates only
those processes executed with super-user
privileges, or ? which designates only those
processes associated with unknown user IDs.
-g group Show only processes belonging to group. The group
can be designated by either the group ID or group
name.
-s time Select processes existing at or after time, given
in the format hr[:min[:sec]].
-e time Select processes existing at or before time.
Using the same time for both -s and -e shows the
processes that existed at time.
-S time Select processes starting at or after time.
-E time Select processes ending at or before time.
-n pattern Show only commands matching pattern where pattern
is a regular expression as in ed(1) except that +
means one or more occurrences.
-q Do not print any output records. Just print the
average statistics as with the -a option.
-o ofile Copy selected process records in the input data
format to ofile. Supress standard output
printing.
Hewlett-Packard Company - 2 - HP-UX Release 9.0: August 1992
acctcom(1M) acctcom(1M)
-H factor Show only processes that exceed factor, where
factor is the ``hog factor'' as explained in
option -h above.
-O time Show only those processes with operating system
CPU time exceeding time.
-C sec Show only processes with total CPU time, system
plus user, exceeding sec seconds.
-I chars Show only processes transferring more characters
than the cut-off number given by chars.
Listing options together has the effect of a logical AND.
FILES
/etc/group
/usr/adm/pacct
/etc/passwd
SEE ALSO
ps(1), su(1), acct(1M), acctcms(1M), acctcon(1M), acctmerg(1M),
acctprc(1M), acctsh(1M), fwtmp(1M), runacct(1M), acct(2), wait(2),
acct(4), utmp(4), signal(5).
BUGS
acctcom only reports on processes that have terminated; use ps(1) for
active processes. If time exceeds the present time, time is
interpreted as occurring on the previous day.
STANDARDS CONFORMANCE
acctcom: SVID2
Hewlett-Packard Company - 3 - HP-UX Release 9.0: August 1992