ACCT(5)

NAME
acct - execution accounting file

SYNOPSIS
#include <sys/acct.h>

DESCRIPTION
The acct(2V) system call makes entries in an accounting file for each process that terminates. The accounting file is a sequence of entries whose layout, as defined by the include file is:

    typedef	u_short comp_t;
    struct  acct
    {
    	char	ac_flag;		/* Accounting flag */
    	char	ac_stat;		/* Exit status */
    	uid_t	ac_uid;			/* Accounting user ID */
    	gid_t	ac_gid;			/* Accounting group ID */
    	dev_t	ac_tty;			/* control typewriter */
    	time_t	ac_btime;		/* Beginning time */
    	comp_t	ac_utime;		/* Accounting user time */
    	comp_t	ac_stime;		/* Accounting system time */
    	comp_t	ac_etime;		/* Accounting elapsed time */
    	comp_t	ac_mem;			/* average memory usage */
    	comp_t	ac_io;			/* chars transferred */
    	comp_t	ac_rw;			/* blocks read or written */
    	char	ac_comm[8];		/* Accounting command name */
    };

The type comp_t is a 3 bits base 8 exponent, 13 bit fraction ``floating point'' number. If the process does an execve(2V), the first 8 characters of the filename appear in ac_comm. ac_flag contains bits indicating whether execve(2V) was ever accomplished, and whether the process ever had super-user privileges.

SEE ALSO
acct(2V), execve(2V), sa(8)