Installation guide

The command output specifies information in a format with seven
unheaded columns that specify the following:
• User identification number
• Login name
• Number of CPU seconds the process used during prime time
• Number of CPU seconds the process used during nonprime time
• Total number of characters transferred
• Total number of blocks read from and written to
• Mean memory size (in kilobytes)
The following is an example of the acctprc1 command and its output:
# /usr/sbin/acct/acctprc1 < /usr/adm/pacct
0 root 0 1 17228 172 6
4 adm 0 6 46782 46 16
0 root 0 22 123941 132 28
9261 hoffmann 6 0 17223 22 20
9 lp 2 0 20345 27 11
9261 hoffmann 0 554 16554 20 234
12.5.8 The acctprc2 Command
The acctprc2 command reads records produced by the acctprc1
command, summarizes them according to user identification number and
login name, and then uses the tacct file format to display the sorted
summaries as total accounting binary records. You can merge the binary
file produced by the acctprc2 command with other total accounting files
by using the acctmerg command to produce a daily summary accounting
record file.
The runacct shell script invokes the acctprc2 command during its
PROCESS state. You can also invoke the command manually.
12.5.9 The lastcomm Command
The lastcomm command displays command execution information from the
/var/adm/pacct file in reverse chronological order.
The following information is displayed for each process:
• Command name
• Either the S flag, which specifies that the command was invoked by the
superuser; or the F flag, which specifies that the command ran after a
fork but was not followed by an exec system call
Administering the System Accounting Services 12–29