1ATOPSAR(1) General Commands Manual ATOPSAR(1)
2
3
4
6 atopsar - AT Computing's System Activity Report (atop related)
7
9 atopsar [-flags...] [-r file|date ] [-R cnt ] [-b hh:mm ] [-e hh:mm ]
10 atopsar [-flags...] interval [ samples ]
11
13 The program atopsar can be used to report statistics on system level.
14
15 In the first synopsis line (no sampling interval specified), atopsar
16 extracts data from a raw logfile that has been recorded previously by
17 the program atop (option -w of the atop program).
18 You can specify the name of the logfile with the -r option of the atop‐
19 sar program. When a daily logfile of atop is used, named
20 /var/log/atop/atop_YYYYMMDD (where YYYYMMDD reflects the date), the
21 required date of the form YYYYMMDD can be specified with the -r option
22 instead of the filename, or the symbolic name 'y' can be used for yes‐
23 terday's daily logfile (this can be repeated so 'yyyy' indicates the
24 logfile of four days ago). If the -r option is not specified at all,
25 today's daily logfile is used by default.
26 The starting and ending times of the report can be defined using the
27 options -b and -e followed by a time argument of the form hh:mm.
28
29 In the second synopsis line, atopsar reads actual activity counters
30 from the kernel with the specified interval (in seconds) and the speci‐
31 fied number of samples (optionally). When atopsar is activated in this
32 way it immediately sends the output for every requested report to stan‐
33 dard output. If only one type of report is requested, the header is
34 printed once and after every interval seconds the statistical counters
35 are shown for that period. If several reports are requested, a header
36 is printed per sample followed by the statistical counters for that
37 period.
38
39 Some generic flags can be specified to influence the behaviour of the
40 atopsar program:
41
42 -S By default the timestamp at the beginning of a line is suppressed
43 if more lines are shown for one interval. With this flag a time‐
44 stamp is given for every output-line (easier for post-processing).
45
46 -a By default certain resources as disks and network interfaces are
47 only shown when they were active during the interval. With this
48 flag all resources of a given type are shown, even if they were
49 inactive during the interval.
50
51 -x By default atopsar only uses colors if output is directed to a
52 terminal (window). These colors might indicate that a critical
53 occupation percentage has been reached (red) or has been almost
54 reached (cyan) for a particular resource. See the man-page of
55 atop for a detailed description of this feature (section COLORS).
56 With the flag -x the use of colors is suppressed unconditionally.
57
58 -C By default atopsar only uses colors if output is directed to a
59 terminal (window). These colors might indicate that a critical
60 occupation percentage has been reached (red) or has been almost
61 reached (cyan) for a particular resource. See the man-page of
62 atop for a detailed description of this feature (section COLORS).
63 With the flag -C colors will always be used, even if output is not
64 directed to a terminal.
65
66 -M Use markers at the end of a line to indicate that a critical occu‐
67 pation percentage has been reached ('*') or has been almost
68 reached ('+') for particular resources. The marker '*' is similar
69 to the color red and the marker '+' to the color cyan. See the
70 man-page of atop for a detailed description of these colors (sec‐
71 tion COLORS).
72
73 -H Repeat the header line within a report for every N detail lines.
74 The value of N is determined dynamically in case of output to a
75 tty/window (depending on the number of lines); for output to a
76 file or pipe this value is 23.
77
78 -R Summarize cnt samples into one sample. When the logfile contains
79 e.g. samples of 10 minutes, the use of the flag '-R 6' shows a
80 report with one sample for every hour.
81
82 Other flags are used to define which reports are required:
83
84 -A Show all possible reports.
85
86 -c Report about CPU utilization (in total and per cpu).
87
88 -p Report about processor-related matters, like load-averages and
89 hardware interrupts.
90
91 -P Report about processes.
92
93 -m Current memory- and swap-occupation.
94
95 -s Report about paging- and swapping-activity, and overcommitment.
96
97 -l Report about utilization of logical volumes.
98
99 -f Report about utilization of multiple devices.
100
101 -d Report about utilization of disks.
102
103 -i Report about the network interfaces.
104
105 -I Report about errors for network-interfaces.
106
107 -w Report about IP version 4 network traffic.
108
109 -W Report about errors for IP version 4 traffic.
110
111 -y General report about ICMP version 4 layer activity.
112
113 -Y Per-type report about ICMP version 4 layer activity.
114
115 -u Report about UDP version 4 network traffic.
116
117 -z Report about IP version 6 network traffic.
118
119 -Z Report about errors for IP version 6 traffic.
120
121 -k General report about ICMP version 6 layer activity.
122
123 -K Per-type report about ICMP version 6 layer activity.
124
125 -U Report about UDP version 6 network traffic.
126
127 -t Report about TCP network traffic.
128
129 -T Report about errors for TCP-traffic.
130
131 -O Report about top-3 processes consuming most processor capacity.
132
133 -G Report about top-3 processes consuming most resident memory.
134
135 -D Report about top-3 processes issueing most disk transfers.
136
137 -N Report about top-3 processes issueing most IPv4/IPv6 socket trans‐
138 fers.
139
141 Depending on the requested report, a number of columns with output val‐
142 ues are produced. The values are mostly presented as a number of
143 events per second.
144
145 The output for the flag -c contains the following columns per cpu:
146
147 usr% Percentage of cpu-time consumed in user mode (program text)
148 for all active processes running with a nice value of zero
149 (default) or a negative nice value (which means a higher
150 priority than usual). The cpu consumption in user mode of
151 processes with a nice value larger than zero (lower prior‐
152 ity) is indicated in the nice%-column.
153
154 nice% Percentage of cpu time consumed in user mode (i.e. program
155 text) for all processes running witn a nice value larger
156 than zero (which means with a lower priority than average).
157
158 sys% Percentage of cpu time consumed in system mode (kernel
159 text) for all active processes. A high percentage usually
160 indicates a lot of system calls being issued.
161
162 irq% Percentage of cpu time consumed for handling of device
163 interrupts.
164
165 softirq% Percentage of cpu time consumed for soft interrupt han‐
166 dling.
167
168 steal% Percentage of cpu time stolen by other virtual machines
169 running on the same hardware.
170
171 guest% Percentage of cpu time used by other virtual machines run‐
172 ning on the same hardware.
173
174 wait% Percentage of unused cpu time while at least one of the
175 processes in wait-state awaits completion of disk I/O.
176
177 idle% Percentage of unused cpu time because all processes are in
178 a wait-state but not waiting for disk-I/O.
179
180 The output for the flag -p contains the following values:
181
182 pswch/s Number of process switches (also called context switches)
183 per second on this cpu. A process switch occurs at the
184 moment that an active thread (i.e. the thread using a cpu)
185 enters a wait state or has used its time slice completely;
186 another thread will then be chosen to use the cpu.
187
188 devintr/s Number of hardware interrupts handled per second on this
189 cpu.
190
191 clones/s The number of new threads started per second.
192
193 loadavg1 Load average reflecting the average number of threads in
194 the runqueue or in non-interruptible wait state (usually
195 waiting for disk or tape I/O) during the last minute.
196
197 loadavg5 Load average reflecting the average number of threads in
198 the runqueue or in non-interruptible wait state (usually
199 waiting for disk or tape I/O) during the last 5 minutes.
200
201 loadavg15 Load average reflecting the average number of threads in
202 the runqueue or in non-interruptible wait state (usually
203 waiting for disk or tape I/O) during the last 15 minutes.
204
205 The output for the flag -P contains information about the processes and
206 threads:
207
208 clones/s The number of new threads started per second.
209
210 pexit/s
211
212 curproc Total number of processes present in the system.
213
214 curzomb Number of zombie processes present in the system.
215
216 thrrun Total number of threads present in the system in state
217 'running'.
218
219 thrslpi Total number of threads present in the system in state
220 'interruptible sleeping'.
221
222 thrslpu Total number of threads present in the system in state
223 'uninterruptible sleeping'.
224
225 The output for the flag -m contains information about the memory- and
226 swap-utilization:
227
228 memtotal Total usable main memory size.
229
230 memfree Available main memory size at this moment (snapshot).
231
232 buffers Main memory used at this moment to cache metadata-blocks
233 (snapshot).
234
235 cached Main memory used at this moment to cache data-blocks (snap‐
236 shot).
237
238 dirty Amount of memory in the page cache that still has to be
239 flushed to disk at this moment (snapshot).
240
241 slabmem Main memory used at this moment for dynamically allocated
242 memory by the kernel (snapshot).
243
244 swptotal Total swap space size at this moment (snapshot).
245
246 swpfree Available swap space at this moment (snapshot).
247
248 The output for the flag -s contains information about the frequency of
249 swapping:
250
251 pagescan/s Number of scanned pages per second due to the fact that
252 free memory drops below a particular threshold.
253
254 swapin/s The number of memory-pages the system read from the swap-
255 device per second.
256
257 swapout/s The number of memory-pages the system wrote to the swap-
258 device per second.
259
260 commitspc The committed virtual memory space i.e. the reserved vir‐
261 tual space for all allocations of private memory space for
262 processes.
263
264 commitlim The maximum limit for the committed space, which is by
265 default swap size plus 50% of memory size. The kernel only
266 verifies whether the committed space exceeds the limit if
267 strict overcommit handling is configured (vm.overcom‐
268 mit_memory is 2).
269
270 The output for the flags -l (LVM), -f (MD), and -d (hard disk) contains
271 the following columns per active unit:
272
273 disk Name.
274
275 busy Busy-percentage of the unit (i.e. the portion of time that
276 the device was busy handling requests).
277
278 read/s Number of read-requests issued per second on this unit.
279
280 KB/read Average number of Kbytes transferred per read-request for
281 this unit.
282
283 writ/s Number of write-requests issued per second on this unit.
284
285 KB/writ Average number of Kbytes transferred per write-request for
286 this unit.
287
288 avque Average number of requests outstanding in the queue during
289 the time that the unit is busy.
290
291 avserv Average number of milliseconds needed by a request on this
292 unit (seek, latency and data-transfer).
293
294 The output for the flag -i provides information about utilization of
295 network interfaces:
296
297 interf Name of interface.
298
299 busy Busy percentage for this interface. If the linespeed of
300 this interface could not be determined (for virtual inter‐
301 faces or in case that atop or atopsar had no root-privi‐
302 leges), a question mark is shown.
303
304 ipack/s Number of packets received from this interface per second.
305
306 opack/s Number of packets transmitted to this interface per second.
307
308 iKbyte/s Number of Kbytes received from this interface per second.
309
310 oKbyte/s Number of Kbytes transmitted via this interface per second.
311
312 imbps/s Effective number of megabits received per second.
313
314 ombps/s Effective number of megabits transmitted per second.
315
316 maxmbps/s Linespeed as number of megabits per second. If the line‐
317 speed could not be determined (for virtual interfaces or in
318 case that atop or atopsar had no root-privileges), value 0
319 is shown.
320 The linespeed is followed by the indication 'f' (full
321 duplex) or 'h' (half duplex).
322
323 The output for the flag -I provides information about the failures that
324 were detected for network interfaces:
325
326 interf Name of interface.
327
328 ierr/s Number of bad packets received from this interface per sec‐
329 ond.
330
331 oerr/s Number of times that packet transmission to this interface
332 failed per second.
333
334 coll/s Number of collisions encountered per second while transmit‐
335 ting packets.
336
337 idrop/s Number of received packets dropped per second due to lack
338 of buffer-space in the local system.
339
340 odrop/s Number of transmitted packets dropped per second due to
341 lack of buffer-space in the local system.
342
343 iframe/s Number of frame alignment-errors encountered per second on
344 received packets.
345
346 ocarrier/s Number of carrier-errors encountered per second on trans‐
347 mitted packets.
348
349 The output for the flag -w provides information about the utilization
350 of the IPv4-layer (formal SNMP-names between brackets):
351
352 inrecv/s Number of IP datagrams received from interfaces per second,
353 including those received in error (ipInReceives).
354
355 outreq/s Number of IP datagrams that local higher-layer protocols
356 supplied to IP in requests for transmission per second
357 (ipOutRequests).
358
359 indeliver/s Number of received IP datagrams that have been succesfully
360 delivered to higher protocol-layers per second (ipInDeliv‐
361 ers).
362
363 forward/s Number of received IP datagrams per second for which this
364 entity was not their final IP destination, as a result of
365 which an attempt was made to forward (ipForwDatagrams).
366
367 reasmok/s Number of IP datagrams succesfully reassembled per second
368 (ipReasmOKs).
369
370 fragcreat/s Number of IP datagram fragments generated per second at
371 this entity (ipFragCreates).
372
373 The output for the flag -W provides information about the failures that
374 were detected in the IPv4-layer (formal SNMP-names between brackets):
375
376 in: dsc/s Number of input IP datagrams per second for which no prob‐
377 lems were encountered to prevent their continued processing
378 but that were discarded, e.g. for lack of buffer space
379 (ipInDiscards).
380
381 in: hder/s Number of input IP datagrams per second discarded due to
382 errors in the IP header (ipInHdrErrors).
383
384 in: ader/s Number of input IP datagrams per second discarded because
385 the IP address in the destination field was not valid to be
386 received by this entity (ipInAddrErrors).
387
388 in: unkp/s Number of inbound packets per second that were discarded
389 because of an unknown or unsupported protocol (ipInUnknown‐
390 Protos).
391
392 in: ratim/s Number of timeout-situations per second while other frag‐
393 ments were expected for successful reassembly (ipReasmTime‐
394 out).
395
396 in: rfail/s Number of failures detected per second by the IP reassembly
397 algorithm (ipReasmFails).
398
399 out: dsc/s Number of output IP datagrams per second for which no prob‐
400 lems were encountered to prevent their continued processing
401 but that were discarded, e.g. for lack of buffer space
402 (ipOutDiscards).
403
404 out: nrt/s Number of IP datagrams per second discarded because no
405 route could be found (ipOutNoRoutes).
406
407 The output for the flag -y provides information about the general uti‐
408 lization of the ICMPv4-layer and some information per type of ICMP-mes‐
409 sage (formal SNMP-names between brackets):
410
411 intot/s Number of ICMP messages (any type) received per second at
412 this entity (icmpInMsgs).
413
414 outtot/s Number of ICMP messages (any type) transmitted per second
415 from this entity (icmpOutMsgs).
416
417 inecho/s Number of ICMP Echo (request) messages received per second
418 (icmpInEchos).
419
420 inerep/s Number of ICMP Echo-Reply messages received per second
421 (icmpInEchoReps).
422
423 otecho/s Number of ICMP Echo (request) messages transmitted per sec‐
424 ond (icmpOutEchos).
425
426 oterep/s Number of ICMP Echo-Reply messages transmitted per second
427 (icmpOutEchoReps).
428
429 The output for the flag -Y provides information about other types of
430 ICMPv4-messages (formal SNMP-names between brackets):
431
432 ierr/s Number of ICMP messages received per second but determined
433 to have ICMP-specific errors (icmpInErrors).
434
435 isq/s Number of ICMP Source Quench messages received per second
436 (icmpInSrcQuenchs).
437
438 ird/s Number of ICMP Redirect messages received per second (icmp‐
439 InRedirects).
440
441 idu/s Number of ICMP Destination Unreachable messages received
442 per second (icmpInDestUnreachs).
443
444 ite/s Number of ICMP Time Exceeded messages received per second
445 (icmpOutTimeExcds).
446
447 oerr/s Number of ICMP messages transmitted per second but deter‐
448 mined to have ICMP-specific errors (icmpOutErrors).
449
450 osq/s Number of ICMP Source Quench messages transmitted per sec‐
451 ond (icmpOutSrcQuenchs).
452
453 ord/s Number of ICMP Redirect messages transmitted per second
454 (icmpOutRedirects).
455
456 odu/s Number of ICMP Destination Unreachable messages transmitted
457 per second (icmpOutDestUnreachs).
458
459 ote/s Number of ICMP Time Exceeded messages transmitted per sec‐
460 ond (icmpOutTimeExcds).
461
462 The output for the flag -u provides information about the utilization
463 of the UDPv4-layer (formal SNMP-names between brackets):
464
465 indgram/s Number of UDP datagrams per second delivered to UDP users
466 (udpInDatagrams).
467
468 outdgram/s Number of UDP datagrams transmitted per second from this
469 entity (udpOutDatagrams).
470
471 inerr/s Number of received UDP datagrams per second that could not
472 be delivered for reasons other than the lack of an applica‐
473 tion at the destination port (udpInErrors).
474
475 noport/s Number of received UDP datagrams per second for which there
476 was no application at the destination port (udpNoPorts).
477
478 The output for the flag -z provides information about the utilization
479 of the IPv6-layer (formal SNMP-names between brackets):
480
481 inrecv/s Number of input IPv6-datagrams received from interfaces per
482 second, including those received in error (ipv6IfStatsInRe‐
483 ceives).
484
485 outreq/s Number of IPv6-datagrams per second that local higher-layer
486 protocols supplied to IP in requests for transmission
487 (ipv6IfStatsOutRequests). This counter does not include
488 any forwarded datagrams.
489
490 inmc/s Number of multicast packets per second that have been
491 received by the interface (ipv6IfStatsInMcastPkts).
492
493 outmc/s Number of multicast packets per second that have been
494 transmitted to the interface (ipv6IfStatsOutMcastPkts).
495
496 indeliv/s Number of IP datagrams succesfully delivered per second to
497 IPv6 user-protocols, including ICMP (ipv6IfStatsInDeliv‐
498 ers).
499
500 reasmok/s Number of IPv6 datagrams succesfully reassembled per second
501 (ipv6IfStatsReasmOKs).
502
503 fragcre/s Number of IPv6 datagram fragments generated per second at
504 this entity (ipv6IfStatsOutFragCreates).
505
506 The output for the flag -Z provides information about the failures that
507 were detected in the IPv6-layer (formal SNMP-names between brackets):
508
509 in: dsc/s Number of input IPv6 datagrams per second for which no
510 problems were encountered to prevent their continued pro‐
511 cessing but that were discarded, e.g. for lack of buffer
512 space (ipv6IfStatsInDiscards).
513
514 in: hder/s Number of input datagrams per second discarded due to
515 errors in the IPv6 header (ipv6IfStatsInHdrErrors).
516
517 in: ader/s Number of input datagrams per second discarded because the
518 IPv6 address in the destination field was not valid to be
519 received by this entity (ipv6IfStatsInAddrErrors).
520
521 in: unkp/s Number of locally-addressed datagrams per second that were
522 discarded because of an unknown or unsupported protocol
523 (ipv6IfStatsInUnknownProtos).
524
525 in: ratim/s Number of timeout-situations per second while other IPv6
526 fragments were expected for successful reassembly
527 (ipv6ReasmTimeout).
528
529 in: rfail/s Number of failures detected per second by the IPv6 reassem‐
530 bly-algorithm (ipv6IfStatsReasmFails).
531
532 out: dsc/s Number of output IPv6 datagrams per second for which no
533 problems were encountered to prevent their continued pro‐
534 cessing but that were discarded, e.g. for lack of buffer
535 space (ipv6IfStatsOutDiscards).
536
537 out: nrt/s Number of IPv6 datagrams per second discarded because no
538 route could be found (ipv6IfStatsInNoRoutes).
539
540 The output for the flag -k provides information about the general uti‐
541 lization of the ICMPv6-layer and some information per type of ICMP-mes‐
542 sage (formal SNMP-names between brackets):
543
544 intot/s Number of ICMPv6 messages (any type) received per second at
545 the interface (ipv6IfIcmpInMsgs).
546
547 outtot/s Number of ICMPv6 messages (any type) transmitted per second
548 from this entity (ipv6IfIcmpOutMsgs).
549
550 inerr/s Number of ICMPv6 messages received per second that had
551 ICMP-specific errors, such as bad ICMP checksums, bad
552 length, etc (ipv6IfIcmpInErrors).
553
554 innsol/s Number of ICMP Neighbor Solicit messages received per sec‐
555 ond (ipv6IfIcmpInNeighborSolicits).
556
557 innadv/s Number of ICMP Neighbor Advertisement messages received per
558 second (ipv6IfIcmpInNeighborAdvertisements).
559
560 otnsol/s Number of ICMP Neighbor Solicit messages transmitted per
561 second (ipv6IfIcmpOutNeighborSolicits).
562
563 otnadv/s Number of ICMP Neighbor Advertisement messages transmitted
564 per second (ipv6IfIcmpOutNeighborAdvertisements).
565
566 The output for the flag -K provides information about other types of
567 ICMPv6-messages (formal SNMP-names between brackets):
568
569 iecho/s Number of ICMP Echo (request) messages received per second
570 (ipv6IfIcmpInEchos).
571
572 ierep/s Number of ICMP Echo-Reply messages received per second
573 (ipv6IfIcmpInEchoReplies).
574
575 oerep/s Number of ICMP Echo-Reply messages transmitted per second
576 (ipv6IfIcmpOutEchoReplies).
577
578 idu/s Number of ICMP Destination Unreachable messages received
579 per second (ipv6IfIcmpInDestUnreachs).
580
581 odu/s Number of ICMP Destination Unreachable messages transmitted
582 per second (ipv6IfIcmpOutDestUnreachs).
583
584 ird/s Number of ICMP Redirect messages received per second
585 (ipv6IfIcmpInRedirects).
586
587 ord/s Number of ICMP Redirect messages transmitted per second
588 (ipv6IfIcmpOutRedirect).
589
590 ite/s Number of ICMP Time Exceeded messages received per second
591 (ipv6IfIcmpInTimeExcds).
592
593 ote/s Number of ICMP Time Exceeded messages transmitted per sec‐
594 ond (ipv6IfIcmpOutTimeExcds).
595
596 The output for the flag -U provides information about the utilization
597 of the UDPv6-layer (formal SNMP-names between brackets):
598
599 indgram/s Number of UDPv6 datagrams per second delivered to UDP users
600 (udpInDatagrams),
601
602 outdgram/s Number of UDPv6 datagrams transmitted per second from this
603 entity (udpOutDatagrams),
604
605 inerr/s Number of received UDPv6 datagrams per second that could
606 not be delivered for reasons other than the lack of an
607 application at the destination port (udpInErrors).
608
609 noport/s Number of received UDPv6 datagrams per second for which
610 there was no application at the destination port (udpNo‐
611 Ports).
612
613 The output for the flag -t provides information about the utilization
614 of the TCP-layer (formal SNMP-names between brackets):
615
616 insegs/s Number of received segments per second, including those
617 received in error (tcpInSegs).
618
619 outsegs/s Number of transmitted segments per second, excluding those
620 containing only retransmitted octets (tcpOutSegs).
621
622 actopen/s Number of active opens per second that have been supported
623 by this entity (tcpActiveOpens).
624
625 pasopen/s Number of passive opens per second that have been supported
626 by this entity (tcpPassiveOpens).
627
628 nowopen Number of connections currently open (snapshot), for which
629 the state is either ESTABLISHED or CLOSE-WAIT (tcpCur‐
630 rEstab).
631
632 The output for the flag -T provides information about the failures that
633 were detected in the TCP-layer (formal SNMP-names between brackets):
634
635 inerr/s Number of received segments per second received in error
636 (tcpInErrs).
637
638 retrans/s Number of retransmitted segments per second (tcpRe‐
639 transSegs).
640
641 attfail/s Number of failed connection attempts per second that have
642 occurred at this entity (tcpAttemptFails).
643
644 estabreset/s
645 Number of resets per second that have occurred at this
646 entity (tcpEstabResets).
647
648 outreset/s Number of transmitted segments per second containing the
649 RST flag (tcpOutRsts).
650
651 The output for the flag -O provides information about the top-3 of pro‐
652 cesses with the highest processor consumption:
653
654 pid Process-id (if zero, the process has exited while the pid
655 could not be determined).
656
657 command The name of the process.
658
659 cpu% The percentage of cpu-capacity being consumed. This value
660 can exceed 100% for a multithreaded process running on a
661 multiprocessor machine.
662
663 The output for the flag -G provides information about the top-3 of pro‐
664 cesses with the highest memory consumption:
665
666 pid Process-id (if zero, the process has exited while the pid
667 could not be determined).
668
669 command The name of the process.
670
671 mem% The percentage of resident memory-utilization by this
672 process.
673
674 The output for the flag -D provides information about the top-3 of pro‐
675 cesses that issue the most read and write accesses to disk:
676
677 pid Process-id (if zero, the process has exited while the pid
678 could not be determined).
679
680 command The name of the process.
681
682 dsk% The percentage of read and write accesses related to the
683 total number of read and write accesses issued on disk by
684 all processes, so a high percentage does not imply a high
685 disk load on system level.
686
687 The output for the flag -N provides information about the top-3 of pro‐
688 cesses that issue the most socket transfers for IPv4/IPv6:
689
690 pid Process-id (if zero, the process has exited while the pid
691 could not be determined).
692
693 command The name of the process.
694
695 net% The percentage of socket transfers related to the total
696 number of transfers issued by all processes, so a high per‐
697 centage does not imply a high network load on system level.
698
700 To see today's cpu-activity so far (supposed that atop is logging in
701 the background):
702
703 atopsar
704
705 To see the memory occupation for January 2, 2010 between 10:00 and
706 12:30 (supposed that atop has been logging daily in the background):
707
708 atopsar -m -r /var/log/atop_20100102 -b 10:00 -e 12:30
709
710 or
711
712 atopsar -m -r 20100102 -b 10:00 -e 12:30
713
714 or, suppose it is January 5, 2010 at this moment
715
716 atopsar -m -r yyy -b 10:00 -e 12:30
717
718 Write a logfile with atop to record the system behaviour for 30 minutes
719 (30 samples of one minute) and produce all available reports after‐
720 wards:
721
722 atop -w /tmp/atoplog 60 30
723
724 atopsar -A -r /tmp/atoplog
725
726 To watch TCP activity evolve for ten minutes (10 samples with sixty
727 seconds interval):
728
729 atopsar -t 60 10
730
731 To watch the header-lines ('_' as last character) of all reports with
732 only the detail-lines showing critical resource consumption (marker '*'
733 or '+' as last character):
734
735 atopsar -AM | grep '[_*+]$'
736
738 /etc/atoprc
739 Configuration file containing system-wide default values (mainly
740 flags). See related man-page.
741
742 ~/.atoprc
743 Configuration file containing personal default values (mainly
744 flags). See related man-page.
745
746 /var/log/atop/atop_YYYYMMDD
747 Daily data file, where YYYYMMDD are digits representing the date.
748
750 atop(1), atoprc(5),
751 http://www.atoptool.nl
752
754 Gerlof Langeveld (gerlof.langeveld@atoptool.nl)
755
756
757
758AT Computing April 2010 ATOPSAR(1)