/usr/lib/acct/acctdusg [ -u nouserfile ] [ -p passwdfile ]
/usr/lib/acct/accton [ file ]
/usr/lib/acct/acctwtmp "reason"
Connect time accounting is handled by various programs that write records into /etc/utmp, as described in utmp(F). The programs described in acctcon(ADM) convert this file into session and charging records, which are then summarized by acctmerg(ADM).
Process accounting is performed by the UNIX system kernel. Upon termination of a process, one record per process is written to a file (normally /usr/adm/pacct). The programs in acctprc(ADM) summarize this data for charging purposes; acctcms(ADM) is used to summarize command usage. Current process data may be examined using acctcom(ADM).
Process accounting and connect time accounting (or any accounting records in the format described in acct(FP)) can be merged and summarized into total accounting records by acctmerg (see tacct format in acct. prtacct (see acctsh(ADM)) is used to format any or all accounting records.
acctdisk reads lines that contain user ID, login name, and number of disk blocks and converts them to total accounting records that can be merged with other accounting records.
acctdusg reads its standard input (usually from find / -print) and computes disk resource consumption (including indirect blocks) by login. If -u is given, records consisting of those file names for which acctdusg charges no one are placed in nouserfile (a potential source for finding users trying to avoid disk charges). If -p is given, passwdfile is the name of a password file. The default password file is /etc/passwd. (Note that you should always use diskusg(ADM) in preference to acctdusg.)
accton with no arguments turns process accounting off. If file is specified, process accounting is turned on. file must be the name of an existing file to which the kernel will append process accounting records (see accton(ADM), acct(S-osr5) and acct.
acctwtmp writes a
utmp
record to its standard output.
The record contains the current time and
a string of characters that describe the
reason.
A record type of ACCOUNTING is assigned (see
utmp(F)).
reason
must be a string of 11 or fewer characters, numbers, $,
or spaces.
For example, the following are suggestions
for use in reboot and shutdown procedures, respectively:
acctwtmp "uname" >> /etc/wtmp
acctwtmp "file save" >> /etc/wtmp
acctwtmp exits with the value returned by the write(S-osr5) of the utmp record. It exits with the value 2 if used incorrectly.
accton and acctusg are not part of any currently supported standard; they are an extension of AT&T System V provided by The Santa Cruz Operation, Inc.