ACCTCOM(1-SysV)     RISC/os Reference Manual      ACCTCOM(1-SysV)



NAME
     acctcom - search and print process accounting file(s)

SYNOPSIS
     acctcom [ [ options ] [ file ] ] . . .

DESCRIPTION
     acctcom reads file, the standard input, or /usr/adm/pacct,
     in the form described by acct(4) and writes selected records
     to the standard output. Each record represents the execution
     of one process. The output shows the COMMAND NAME, USER,
     TTYNAME, START TIME, CPU (SEC), MEAN SIZE(K), and option-
     ally, F (the fork/exec flag: 1 for fork without exec), STAT
     (the system exit status), HOG FACTOR, KCORE MIN, CPU FACTOR,
     and BLOCKS READ (total blocks read and written).

     A # is prepended to the command name if the command was exe-
     cuted with superuser privileges. If a process is not associ-
     ated with a known terminal, a ? is printed in the TTYNAME
     field.

     If no files are specified, and if the standard input is
     associated with a terminal or /dev/null (as is the case when
     using & in the shell), /usr/adm/pacct is read; otherwise,
     the standard input is read.

     If any file arguments are given, they are read in their
     respective order. Each file is normally read forward, i.e.,
     in chronological order by process completion time. The file
     /usr/adm/pacct is usually the current file to be examined; a
     busy system may need several such files of which all but the
     current file are found in /usr/adm/pacct? The options are:

     -a        Show some average statistics about the processes
               selected. The statistics will be printed after the
               output records.
     -b        Read backwards, showing latest commands first.
               This option has no effect when the standard input
               is read.
     -f        Print the fork/exec flag and system exit status
               columns in the output. The numeric output for this
               option will be in octal.
     -h        Instead of mean memory size, show the fraction of
               total available CPU time consumed by the process
               during its execution. This "hog factor" is com-
               puted as:
                    (total CPU time)/(elapsed time).
     -i        Print columns containing the I/O counts in the
               output.
     -k        Instead of memory size, show total kcore-minutes.
     -m        Show mean core size (the default).
     -r        Show CPU factor (user time/(system-time + user-



                         Printed 1/15/91                   Page 1

ACCTCOM(1-SysV)     RISC/os Reference Manual      ACCTCOM(1-SysV)



               time).

     -t        Show separate system and user CPU times.
     -v        Exclude column headings from the output.
     -Iline    Show only processes belonging to terminal
               /dev/line.
     -uuser    Show only processes belonging to user that may be
               specified by: a user ID, a login name that is then
               converted to a user ID, a #, which designates only
               those processes executed with superuser
               privileges, or ?, which designates only those
               processes associated with unknown user IDs.
     -ggroup   Show only processes belonging to group.  The group
               may be designated by either the group ID or group
               name.
     -stime    Select processes existing at or after time, given
               in the format hr[:min[:sec]].
     -etime    Select processes existing at or before time.
     -Stime    Select processes starting at or after time.
     -Etime    Select processes ending at or before time.  Using
               the same time for both -S and -E shows the
               processes that existed at time.
     -npattern Show only commands matching pattern that may be a
               regular expression as in ed(1) except that + means
               one or more occurrences.
     -q        Do not print any output records, just print the
               average statistics as with the -a option.
     -oofile   Copy selected process records in the input data
               format to ofile; supress standard output printing.
     -Hfactor  Show only processes that exceed factor, where fac-
               tor is the "hog factor" as explained in option -h
               above.
     -Osec     Show only processes with CPU system time exceeding
               sec seconds.
     -Csec     Show only processes with total CPU time, system
               plus user, exceeding sec seconds.
     -Ichars   Show only processes transferring more characters
               than the cutoff number given by chars.

FILES
     /etc/passwd
     /usr/adm/pacct
     /etc/group

SEE ALSO
     ps(1).
     acct(2), acct(4), utmp(4) in the Programmer's Reference
     Manual.
     su(1M), acct(1M), acctcms(1M), acctcon(1M), acctmerg(1M),
     acctprc(1M), acctsh(1M), fwtmp(1M), runacct(1M) in the Sys-
     tem Administrator's Reference Manual.




 Page 2                  Printed 1/15/91

ACCTCOM(1-SysV)     RISC/os Reference Manual      ACCTCOM(1-SysV)



BUGS
     acctcom reports only on processes that have terminated; use
     ps(1) for active processes. If time exceeds the present
     time, then time is interpreted as occurring on the previous
     day.


















































                         Printed 1/15/91                   Page 3