1SAR(1) Linux User's Manual SAR(1)
2
6 sar - Collect, report, or save system activity information.
7
10 sar [ -A ] [ -B ] [ -b ] [ -C ] [ -D ] [ -d ] [ -F [ MOUNT ] ] [ -H ] [
11 -h ] [ -p ] [ -r [ ALL ] ] [ -S ] [ -t ] [ -u [ ALL ] ] [ -V ] [ -v ] [
12 -W ] [ -w ] [ -y ] [ -z ] [ --dec={ 0 | 1 | 2 } ] [ --dev=dev_list ] [
13 --fs=fs_list ] [ --help ] [ --human ] [ --iface=iface_list ] [ --pretty
14 ] [ --sadc ] [ -I { int_list | SUM | ALL } ] [ -P { cpu_list | ALL } ]
15 [ -m { keyword[,...] | ALL } ] [ -n { keyword[,...] | ALL } ] [ -q [
16 keyword[,...] | ALL ] ] [ -j { SID | ID | LABEL | PATH | UUID | ... } ]
17 [ -f [ filename ] | -o [ filename ] | -[0-9]+ ] [ -i interval ] [ -s [
18 hh:mm[:ss] ] ] [ -e [ hh:mm[:ss] ] ] [ interval [ count ] ]
19
22 The sar command writes to standard output the contents of selected cu‐
23 mulative activity counters in the operating system. The accounting sys‐
24 tem, based on the values in the count and interval parameters, writes
25 information the specified number of times spaced at the specified in‐
26 tervals in seconds. If the interval parameter is set to zero, the sar
27 command displays the average statistics for the time since the system
28 was started. If the interval parameter is specified without the count
29 parameter, then reports are generated continuously. The collected data
30 can also be saved in the file specified by the -o filename flag, in ad‐
31 dition to being displayed onto the screen. If filename is omitted, sar
32 uses the standard system activity daily data file (see below). By de‐
33 fault all the data available from the kernel are saved in the data
34 file.
35 The sar command extracts and writes to standard output records previ‐
37 ously saved in a file. This file can be either the one specified by the
38 -f flag or, by default, the standard system activity daily data file.
39 It is also possible to enter -1, -2 etc. as an argument to sar to dis‐
40 play data of that days ago. For example, -1 will point at the standard
41 system activity file of yesterday.
42 Standard system activity daily data files are named saDD or saYYYYMMDD,
44 where YYYY stands for the current year, MM for the current month and DD
45 for the current day. They are the default files used by sar only when
46 no filename has been explicitly specified. When used to write data to
47 files (with its option -o), sar will use saYYYYMMDD if option -D has
48 also been specified, else it will use saDD. When used to display the
49 records previously saved in a file, sar will look for the most recent
50 of saDD and saYYYYMMDD, and use it.
51 Standard system activity daily data files are located in the
53 /var/log/sa directory by default. Yet it is possible to specify an al‐
54 ternate location for them: If a directory (instead of a plain file) is
55 used with options -f or -o then it will be considered as the directory
56 containing the data files.
57 Without the -P flag, the sar command reports system-wide (global among
59 all processors) statistics, which are calculated as averages for values
60 expressed as percentages, and as sums otherwise. If the -P flag is
61 given, the sar command reports activity which relates to the specified
62 processor or processors. If -P ALL is given, the sar command reports
63 statistics for each individual processor and global statistics among
64 all processors. Offline processors are not displayed.
65 You can select information about specific system activities using
67 flags. Not specifying any flags selects only CPU activity. Specifying
68 the -A flag selects all possible activities.
69 The default version of the sar command (CPU utilization report) might
71 be one of the first facilities the user runs to begin system activity
72 investigation, because it monitors major system resources. If CPU uti‐
73 lization is near 100 percent (user + nice + system), the workload sam‐
74 pled is CPU-bound.
75 If multiple samples and multiple reports are desired, it is convenient
77 to specify an output file for the sar command. Run the sar command as a
78 background process. The syntax for this is:
79 sar -o datafile interval count >/dev/null 2>&1 &
81 All data are captured in binary form and saved to a file (datafile).
83 The data can then be selectively displayed with the sar command using
84 the -f option. Set the interval and count parameters to select count
85 records at interval second intervals. If the count parameter is not
86 set, all the records saved in the file will be selected. Collection of
87 data in this manner is useful to characterize system usage over a pe‐
88 riod of time and determine peak usage hours.
89 Note: The sar command only reports on local activities.
91
94 -A This is equivalent to specifying -bBdFHSvwWy -I SUM -m ALL -n
95 ALL -q ALL -r ALL -u ALL. This option also implies specifying
96 -I ALL -P ALL unless these options are explicitly set on the
97 command line.
98 -B Report paging statistics. The following values are displayed:
100 pgpgin/s
102 Total number of kilobytes the system paged in from disk
103 per second.
104 pgpgout/s
106 Total number of kilobytes the system paged out to disk
107 per second.
108 fault/s
110 Number of page faults (major + minor) made by the system
111 per second. This is not a count of page faults that gen‐
112 erate I/O, because some page faults can be resolved with‐
113 out I/O.
114 majflt/s
116 Number of major faults the system has made per second,
117 those which have required loading a memory page from
118 disk.
119 pgfree/s
121 Number of pages placed on the free list by the system per
122 second.
123 pgscank/s
125 Number of pages scanned by the kswapd daemon per second.
126 pgscand/s
128 Number of pages scanned directly per second.
129 pgsteal/s
131 Number of pages the system has reclaimed from cache
132 (pagecache and swapcache) per second to satisfy its mem‐
133 ory demands.
134 %vmeff Calculated as pgsteal / pgscan, this is a metric of the
136 efficiency of page reclaim. If it is near 100% then al‐
137 most every page coming off the tail of the inactive list
138 is being reaped. If it gets too low (e.g. less than 30%)
139 then the virtual memory is having some difficulty. This
140 field is displayed as zero if no pages have been scanned
141 during the interval of time.
142 -b Report I/O and transfer rate statistics. The following values
144 are displayed:
145 tps Total number of transfers per second that were issued to
147 physical devices. A transfer is an I/O request to a
148 physical device. Multiple logical requests can be com‐
149 bined into a single I/O request to the device. A trans‐
150 fer is of indeterminate size.
151 rtps Total number of read requests per second issued to physi‐
153 cal devices.
154 wtps Total number of write requests per second issued to phys‐
156 ical devices.
157 dtps Total number of discard requests per second issued to
159 physical devices.
160 bread/s
162 Total amount of data read from the devices in blocks per
163 second. Blocks are equivalent to sectors and therefore
164 have a size of 512 bytes.
165 bwrtn/s
167 Total amount of data written to devices in blocks per
168 second.
169 bdscd/s
171 Total amount of data discarded for devices in blocks per
172 second.
173 -C When reading data from a file, tell sar to display comments that
175 have been inserted by sadc.
176 -D Use saYYYYMMDD instead of saDD as the standard system activity
178 daily data file name. This option works only when used in con‐
179 junction with option -o to save data to file.
180 -d Report activity for each block device. When data are displayed,
182 the device name is displayed as it (should) appear in /dev. sar
183 uses data in /sys to determine the device name based on its ma‐
184 jor and minor numbers. If this name resolution fails, sar will
185 use name mapping controlled by /etc/sysconfig/sysstat.ioconf
186 file. Persistent device names can also be printed if option -j
187 is used (see below). Statistics for all devices are displayed
188 unless a restricted list is specified using option --dev= (see
189 corresponding option entry). Note that disk activity depends on
190 sadc's options -S DISK and -S XDISK to be collected. The follow‐
191 ing values are displayed:
192 tps Total number of transfers per second that were issued to
194 physical devices. A transfer is an I/O request to a
195 physical device. Multiple logical requests can be com‐
196 bined into a single I/O request to the device. A trans‐
197 fer is of indeterminate size.
198 rkB/s Number of kilobytes read from the device per second.
200 wkB/s Number of kilobytes written to the device per second.
202 dkB/s Number of kilobytes discarded for the device per second.
204 areq-sz
206 The average size (in kilobytes) of the I/O requests that
207 were issued to the device.
208 Note: In previous versions, this field was known as av‐
209 grq-sz and was expressed in sectors.
210 aqu-sz The average queue length of the requests that were issued
212 to the device.
213 Note: In previous versions, this field was known as
214 avgqu-sz.
215 await The average time (in milliseconds) for I/O requests is‐
217 sued to the device to be served. This includes the time
218 spent by the requests in queue and the time spent servic‐
219 ing them.
220 %util Percentage of elapsed time during which I/O requests were
222 issued to the device (bandwidth utilization for the de‐
223 vice). Device saturation occurs when this value is close
224 to 100% for devices serving requests serially. But for
225 devices serving requests in parallel, such as RAID arrays
226 and modern SSDs, this number does not reflect their per‐
227 formance limits.
228 --dec={ 0 | 1 | 2 }
230 Specify the number of decimal places to use (0 to 2, default
231 value is 2).
232 --dev=dev_list
234 Specify the block devices for which statistics are to be dis‐
235 played by sar. dev_list is a list of comma-separated device
236 names.
237 -e [ hh:mm[:ss] ]
239 Set the ending time of the report. The default ending time is
240 18:00:00. Hours must be given in 24-hour format. This option
241 can be used when data are read from or written to a file (op‐
242 tions -f or -o).
243 -F [ MOUNT ]
245 Display statistics for currently mounted filesystems. Pseudo-
246 filesystems are ignored. At the end of the report, sar will dis‐
247 play a summary of all those filesystems. Use of the MOUNT param‐
248 eter keyword indicates that mountpoint will be reported instead
249 of filesystem device. Statistics for all filesystems are dis‐
250 played unless a restricted list is specified using option --fs=
251 (see corresponding option entry). Note that filesystems statis‐
252 tics depend on sadc's option -S XDISK to be collected.
253 The following values are displayed:
255 MBfsfree
257 Total amount of free space in megabytes (including space
258 available only to privileged user).
259 MBfsused
261 Total amount of space used in megabytes.
262 %fsused
264 Percentage of filesystem space used, as seen by a privi‐
265 leged user.
266 %ufsused
268 Percentage of filesystem space used, as seen by an un‐
269 privileged user.
270 Ifree Total number of free file nodes in filesystem.
272 Iused Total number of file nodes used in filesystem.
274 %Iused Percentage of file nodes used in filesystem.
276 -f [ filename ]
278 Extract records from filename (created by the -o filename flag).
279 The default value of the filename parameter is the current stan‐
280 dard system activity daily data file. If filename is a directory
281 instead of a plain file then it is considered as the directory
282 where the standard system activity daily data files are located.
283 Option -f is exclusive of option -o.
284 --fs=fs_list
286 Specify the filesystems for which statistics are to be displayed
287 by sar. fs_list is a list of comma-separated filesystem names
288 or mountpoints.
289 -H Report hugepages utilization statistics. The following values
291 are displayed:
292 kbhugfree
294 Amount of hugepages memory in kilobytes that is not yet
295 allocated.
296 kbhugused
298 Amount of hugepages memory in kilobytes that has been al‐
299 located.
300 %hugused
302 Percentage of total hugepages memory that has been allo‐
303 cated.
304 kbhugrsvd
306 Amount of reserved hugepages memory in kilobytes.
307 kbhugsurp
309 Amount of surplus hugepages memory in kilobytes.
310 -h This option is equivalent to specifying --pretty --human.
312 --help Display a short help message then exit.
314 --human
316 Print sizes in human readable format (e.g. 1.0k, 1.2M, etc.)
317 The units displayed with this option supersede any other default
318 units (e.g. kilobytes, sectors...) associated with the metrics.
319 -I { int_list | SUM | ALL }
321 Report statistics for interrupts. int_list is a list of comma-
322 separated values or range of values (e.g., 0-16,35,400-). The
323 SUM keyword indicates that the total number of interrupts re‐
324 ceived per second is to be displayed. The ALL keyword indicates
325 that statistics from all interrupts, including potential APIC
326 interrupt sources, are to be reported. Note that interrupt sta‐
327 tistics depend on sadc's option -S INT to be collected.
328 -i interval
330 Select data records at seconds as close as possible to the num‐
331 ber specified by the interval parameter.
332 --iface=iface_list
334 Specify the network interfaces for which statistics are to be
335 displayed by sar. iface_list is a list of comma-separated in‐
336 terface names.
337 -j { SID | ID | LABEL | PATH | UUID | ... }
339 Display persistent device names. Use this option in conjunction
340 with option -d. Keywords ID, LABEL, etc. specify the type of the
341 persistent name. These keywords are not limited, only prerequi‐
342 site is that directory with required persistent names is present
343 in /dev/disk. Keyword SID tries to get a stable identifier to
344 use as the device name. A stable identifier won't change across
345 reboots for the same physical device. If it exists, this identi‐
346 fier is normally the WWN (World Wide Name) of the device, as
347 read from the /dev/disk/by-id directory.
348 -m { keyword[,...] | ALL }
350 Report power management statistics. Note that these statistics
351 depend on sadc's option -S POWER to be collected.
352 Possible keywords are CPU, FAN, FREQ, IN, TEMP and USB.
354 With the CPU keyword, statistics about CPU are reported. The
356 following value is displayed:
357 MHz Instantaneous CPU clock frequency in MHz.
359 With the FAN keyword, statistics about fans speed are reported.
362 The following values are displayed:
363 rpm Fan speed expressed in revolutions per minute.
365 drpm This field is calculated as the difference between cur‐
367 rent fan speed (rpm) and its low limit (fan_min).
368 DEVICE Sensor device name.
370 With the FREQ keyword, statistics about CPU clock frequency are
373 reported. The following value is displayed:
374 wghMHz Weighted average CPU clock frequency in MHz. Note that
376 the cpufreq-stats driver must be compiled in the kernel
377 for this option to work.
378 With the IN keyword, statistics about voltage inputs are re‐
381 ported. The following values are displayed:
382 inV Voltage input expressed in Volts.
384 %in Relative input value. A value of 100% means that voltage
386 input has reached its high limit (in_max) whereas a value
387 of 0% means that it has reached its low limit (in_min).
388 DEVICE Sensor device name.
390 With the TEMP keyword, statistics about devices temperature are
393 reported. The following values are displayed:
394 degC Device temperature expressed in degrees Celsius.
396 %temp Relative device temperature. A value of 100% means that
398 temperature has reached its high limit (temp_max).
399 DEVICE Sensor device name.
401 With the USB keyword, the sar command takes a snapshot of all
404 the USB devices currently plugged into the system. At the end of
405 the report, sar will display a summary of all those USB devices.
406 The following values are displayed:
407 BUS Root hub number of the USB device.
409 idvendor
411 Vendor ID number (assigned by USB organization).
412 idprod Product ID number (assigned by Manufacturer).
414 maxpower
416 Maximum power consumption of the device (expressed in
417 mA).
418 manufact
420 Manufacturer name.
421 product
423 Product name.
424 The ALL keyword is equivalent to specifying all the keywords
427 above and therefore all the power management statistics are re‐
428 ported.
429 -n { keyword[,...] | ALL }
431 Report network statistics.
432 Possible keywords are DEV, EDEV, FC, ICMP, EICMP, ICMP6, EICMP6,
434 IP, EIP, IP6, EIP6, NFS, NFSD, SOCK, SOCK6, SOFT, TCP, ETCP, UDP
435 and UDP6.
436 With the DEV keyword, statistics from the network devices are
438 reported. Statistics for all network interfaces are displayed
439 unless a restricted list is specified using option --iface= (see
440 corresponding option entry). The following values are dis‐
441 played:
442 IFACE Name of the network interface for which statistics are
444 reported.
445 rxpck/s
447 Total number of packets received per second.
448 txpck/s
450 Total number of packets transmitted per second.
451 rxkB/s Total number of kilobytes received per second.
453 txkB/s Total number of kilobytes transmitted per second.
455 rxcmp/s
457 Number of compressed packets received per second (for
458 cslip etc.).
459 txcmp/s
461 Number of compressed packets transmitted per second.
462 rxmcst/s
464 Number of multicast packets received per second.
465 %ifutil
467 Utilization percentage of the network interface. For
468 half-duplex interfaces, utilization is calculated using
469 the sum of rxkB/s and txkB/s as a percentage of the in‐
470 terface speed. For full-duplex, this is the greater of
471 rxkB/S or txkB/s.
472 With the EDEV keyword, statistics on failures (errors) from the
475 network devices are reported. Statistics for all network inter‐
476 faces are displayed unless a restricted list is specified using
477 option --iface= (see corresponding option entry). The following
478 values are displayed:
479 IFACE Name of the network interface for which statistics are
481 reported.
482 rxerr/s
484 Total number of bad packets received per second.
485 txerr/s
487 Total number of errors that happened per second while
488 transmitting packets.
489 coll/s Number of collisions that happened per second while
491 transmitting packets.
492 rxdrop/s
494 Number of received packets dropped per second because of
495 a lack of space in linux buffers.
496 txdrop/s
498 Number of transmitted packets dropped per second because
499 of a lack of space in linux buffers.
500 txcarr/s
502 Number of carrier-errors that happened per second while
503 transmitting packets.
504 rxfram/s
506 Number of frame alignment errors that happened per second
507 on received packets.
508 rxfifo/s
510 Number of FIFO overrun errors that happened per second on
511 received packets.
512 txfifo/s
514 Number of FIFO overrun errors that happened per second on
515 transmitted packets.
516 With the FC keyword, statistics about fibre channel traffic are
519 reported. Note that fibre channel statistics depend on sadc's
520 option -S DISK to be collected. The following values are dis‐
521 played:
522 FCHOST Name of the fibre channel host bus adapter (HBA) inter‐
524 face for which statistics are reported.
525 fch_rxf/s
527 The total number of frames received per second.
528 fch_txf/s
530 The total number of frames transmitted per second.
531 fch_rxw/s
533 The total number of transmission words received per sec‐
534 ond.
535 fch_txw/s
537 The total number of transmission words transmitted per
538 second.
539 With the ICMP keyword, statistics about ICMPv4 network traffic
542 are reported. Note that ICMPv4 statistics depend on sadc's op‐
543 tion -S SNMP to be collected. The following values are dis‐
544 played (formal SNMP names between square brackets):
545 imsg/s The total number of ICMP messages which the entity re‐
547 ceived per second [icmpInMsgs]. Note that this counter
548 includes all those counted by ierr/s.
549 omsg/s The total number of ICMP messages which this entity at‐
551 tempted to send per second [icmpOutMsgs]. Note that this
552 counter includes all those counted by oerr/s.
553 iech/s The number of ICMP Echo (request) messages received per
555 second [icmpInEchos].
556 iechr/s
558 The number of ICMP Echo Reply messages received per sec‐
559 ond [icmpInEchoReps].
560 oech/s The number of ICMP Echo (request) messages sent per sec‐
562 ond [icmpOutEchos].
563 oechr/s
565 The number of ICMP Echo Reply messages sent per second
566 [icmpOutEchoReps].
567 itm/s The number of ICMP Timestamp (request) messages received
569 per second [icmpInTimestamps].
570 itmr/s The number of ICMP Timestamp Reply messages received per
572 second [icmpInTimestampReps].
573 otm/s The number of ICMP Timestamp (request) messages sent per
575 second [icmpOutTimestamps].
576 otmr/s The number of ICMP Timestamp Reply messages sent per sec‐
578 ond [icmpOutTimestampReps].
579 iadrmk/s
581 The number of ICMP Address Mask Request messages received
582 per second [icmpInAddrMasks].
583 iadrmkr/s
585 The number of ICMP Address Mask Reply messages received
586 per second [icmpInAddrMaskReps].
587 oadrmk/s
589 The number of ICMP Address Mask Request messages sent per
590 second [icmpOutAddrMasks].
591 oadrmkr/s
593 The number of ICMP Address Mask Reply messages sent per
594 second [icmpOutAddrMaskReps].
595 With the EICMP keyword, statistics about ICMPv4 error messages
598 are reported. Note that ICMPv4 statistics depend on sadc's op‐
599 tion -S SNMP to be collected. The following values are dis‐
600 played (formal SNMP names between square brackets):
601 ierr/s The number of ICMP messages per second which the entity
603 received but determined as having ICMP-specific errors
604 (bad ICMP checksums, bad length, etc.) [icmpInErrors].
605 oerr/s The number of ICMP messages per second which this entity
607 did not send due to problems discovered within ICMP such
608 as a lack of buffers [icmpOutErrors].
609 idstunr/s
611 The number of ICMP Destination Unreachable messages re‐
612 ceived per second [icmpInDestUnreachs].
613 odstunr/s
615 The number of ICMP Destination Unreachable messages sent
616 per second [icmpOutDestUnreachs].
617 itmex/s
619 The number of ICMP Time Exceeded messages received per
620 second [icmpInTimeExcds].
621 otmex/s
623 The number of ICMP Time Exceeded messages sent per second
624 [icmpOutTimeExcds].
625 iparmpb/s
627 The number of ICMP Parameter Problem messages received
628 per second [icmpInParmProbs].
629 oparmpb/s
631 The number of ICMP Parameter Problem messages sent per
632 second [icmpOutParmProbs].
633 isrcq/s
635 The number of ICMP Source Quench messages received per
636 second [icmpInSrcQuenchs].
637 osrcq/s
639 The number of ICMP Source Quench messages sent per second
640 [icmpOutSrcQuenchs].
641 iredir/s
643 The number of ICMP Redirect messages received per second
644 [icmpInRedirects].
645 oredir/s
647 The number of ICMP Redirect messages sent per second
648 [icmpOutRedirects].
649 With the ICMP6 keyword, statistics about ICMPv6 network traffic
652 are reported. Note that ICMPv6 statistics depend on sadc's op‐
653 tion -S IPV6 to be collected. The following values are dis‐
654 played (formal SNMP names between square brackets):
655 imsg6/s
657 The total number of ICMP messages received by the inter‐
658 face per second which includes all those counted by
659 ierr6/s [ipv6IfIcmpInMsgs].
660 omsg6/s
662 The total number of ICMP messages which this interface
663 attempted to send per second [ipv6IfIcmpOutMsgs].
664 iech6/s
666 The number of ICMP Echo (request) messages received by
667 the interface per second [ipv6IfIcmpInEchos].
668 iechr6/s
670 The number of ICMP Echo Reply messages received by the
671 interface per second [ipv6IfIcmpInEchoReplies].
672 oechr6/s
674 The number of ICMP Echo Reply messages sent by the inter‐
675 face per second [ipv6IfIcmpOutEchoReplies].
676 igmbq6/s
678 The number of ICMPv6 Group Membership Query messages re‐
679 ceived by the interface per second [ipv6IfIcmpInGroupMem‐
680 bQueries].
681 igmbr6/s
683 The number of ICMPv6 Group Membership Response messages
684 received by the interface per second [ipv6IfIcmpInGroup‐
685 MembResponses].
686 ogmbr6/s
688 The number of ICMPv6 Group Membership Response messages
689 sent per second [ipv6IfIcmpOutGroupMembResponses].
690 igmbrd6/s
692 The number of ICMPv6 Group Membership Reduction messages
693 received by the interface per second [ipv6IfIcmpInGroup‐
694 MembReductions].
695 ogmbrd6/s
697 The number of ICMPv6 Group Membership Reduction messages
698 sent per second [ipv6IfIcmpOutGroupMembReductions].
699 irtsol6/s
701 The number of ICMP Router Solicit messages received by
702 the interface per second [ipv6IfIcmpInRouterSolicits].
703 ortsol6/s
705 The number of ICMP Router Solicitation messages sent by
706 the interface per second [ipv6IfIcmpOutRouterSolicits].
707 irtad6/s
709 The number of ICMP Router Advertisement messages received
710 by the interface per second [ipv6IfIcmpInRouterAdvertise‐
711 ments].
712 inbsol6/s
714 The number of ICMP Neighbor Solicit messages received by
715 the interface per second [ipv6IfIcmpInNeighborSolicits].
716 onbsol6/s
718 The number of ICMP Neighbor Solicitation messages sent by
719 the interface per second [ipv6IfIcmpOutNeighborSolicits].
720 inbad6/s
722 The number of ICMP Neighbor Advertisement messages re‐
723 ceived by the interface per second [ipv6IfIcmpInNeighbo‐
724 rAdvertisements].
725 onbad6/s
727 The number of ICMP Neighbor Advertisement messages sent
728 by the interface per second [ipv6IfIcmpOutNeighborAdver‐
729 tisements].
730 With the EICMP6 keyword, statistics about ICMPv6 error messages
733 are reported. Note that ICMPv6 statistics depend on sadc's op‐
734 tion -S IPV6 to be collected. The following values are dis‐
735 played (formal SNMP names between square brackets):
736 ierr6/s
738 The number of ICMP messages per second which the inter‐
739 face received but determined as having ICMP-specific er‐
740 rors (bad ICMP checksums, bad length, etc.)
741 [ipv6IfIcmpInErrors]
742 idtunr6/s
744 The number of ICMP Destination Unreachable messages re‐
745 ceived by the interface per second [ipv6IfIcmpInDestUn‐
746 reachs].
747 odtunr6/s
749 The number of ICMP Destination Unreachable messages sent
750 by the interface per second [ipv6IfIcmpOutDestUnreachs].
751 itmex6/s
753 The number of ICMP Time Exceeded messages received by the
754 interface per second [ipv6IfIcmpInTimeExcds].
755 otmex6/s
757 The number of ICMP Time Exceeded messages sent by the in‐
758 terface per second [ipv6IfIcmpOutTimeExcds].
759 iprmpb6/s
761 The number of ICMP Parameter Problem messages received by
762 the interface per second [ipv6IfIcmpInParmProblems].
763 oprmpb6/s
765 The number of ICMP Parameter Problem messages sent by the
766 interface per second [ipv6IfIcmpOutParmProblems].
767 iredir6/s
769 The number of Redirect messages received by the interface
770 per second [ipv6IfIcmpInRedirects].
771 oredir6/s
773 The number of Redirect messages sent by the interface by
774 second [ipv6IfIcmpOutRedirects].
775 ipck2b6/s
777 The number of ICMP Packet Too Big messages received by
778 the interface per second [ipv6IfIcmpInPktTooBigs].
779 opck2b6/s
781 The number of ICMP Packet Too Big messages sent by the
782 interface per second [ipv6IfIcmpOutPktTooBigs].
783 With the IP keyword, statistics about IPv4 network traffic are
786 reported. Note that IPv4 statistics depend on sadc's option -S
787 SNMP to be collected. The following values are displayed (for‐
788 mal SNMP names between square brackets):
789 irec/s The total number of input datagrams received from inter‐
791 faces per second, including those received in error [ip‐
792 InReceives].
793 fwddgm/s
795 The number of input datagrams per second, for which this
796 entity was not their final IP destination, as a result of
797 which an attempt was made to find a route to forward them
798 to that final destination [ipForwDatagrams].
799 idel/s The total number of input datagrams successfully deliv‐
801 ered per second to IP user-protocols (including ICMP)
802 [ipInDelivers].
803 orq/s The total number of IP datagrams which local IP user-pro‐
805 tocols (including ICMP) supplied per second to IP in re‐
806 quests for transmission [ipOutRequests]. Note that this
807 counter does not include any datagrams counted in fwd‐
808 dgm/s.
809 asmrq/s
811 The number of IP fragments received per second which
812 needed to be reassembled at this entity [ipReasmReqds].
813 asmok/s
815 The number of IP datagrams successfully re-assembled per
816 second [ipReasmOKs].
817 fragok/s
819 The number of IP datagrams that have been successfully
820 fragmented at this entity per second [ipFragOKs].
821 fragcrt/s
823 The number of IP datagram fragments that have been gener‐
824 ated per second as a result of fragmentation at this en‐
825 tity [ipFragCreates].
826 With the EIP keyword, statistics about IPv4 network errors are
829 reported. Note that IPv4 statistics depend on sadc's option -S
830 SNMP to be collected. The following values are displayed (for‐
831 mal SNMP names between square brackets):
832 ihdrerr/s
834 The number of input datagrams discarded per second due to
835 errors in their IP headers, including bad checksums, ver‐
836 sion number mismatch, other format errors, time-to-live
837 exceeded, errors discovered in processing their IP op‐
838 tions, etc. [ipInHdrErrors]
839 iadrerr/s
841 The number of input datagrams discarded per second be‐
842 cause the IP address in their IP header's destination
843 field was not a valid address to be received at this en‐
844 tity. This count includes invalid addresses (e.g.,
845 0.0.0.0) and addresses of unsupported Classes (e.g.,
846 Class E). For entities which are not IP routers and
847 therefore do not forward datagrams, this counter includes
848 datagrams discarded because the destination address was
849 not a local address [ipInAddrErrors].
850 iukwnpr/s
852 The number of locally-addressed datagrams received suc‐
853 cessfully but discarded per second because of an unknown
854 or unsupported protocol [ipInUnknownProtos].
855 idisc/s
857 The number of input IP datagrams per second for which no
858 problems were encountered to prevent their continued pro‐
859 cessing, but which were discarded (e.g., for lack of buf‐
860 fer space) [ipInDiscards]. Note that this counter does
861 not include any datagrams discarded while awaiting re-as‐
862 sembly.
863 odisc/s
865 The number of output IP datagrams per second for which no
866 problem was encountered to prevent their transmission to
867 their destination, but which were discarded (e.g., for
868 lack of buffer space) [ipOutDiscards]. Note that this
869 counter would include datagrams counted in fwddgm/s if
870 any such packets met this (discretionary) discard crite‐
871 rion.
872 onort/s
874 The number of IP datagrams discarded per second because
875 no route could be found to transmit them to their desti‐
876 nation [ipOutNoRoutes]. Note that this counter includes
877 any packets counted in fwddgm/s which meet this 'no-
878 route' criterion. Note that this includes any datagrams
879 which a host cannot route because all of its default
880 routers are down.
881 asmf/s The number of failures detected per second by the IP re-
883 assembly algorithm (for whatever reason: timed out, er‐
884 rors, etc) [ipReasmFails]. Note that this is not neces‐
885 sarily a count of discarded IP fragments since some algo‐
886 rithms can lose track of the number of fragments by com‐
887 bining them as they are received.
888 fragf/s
890 The number of IP datagrams that have been discarded per
891 second because they needed to be fragmented at this en‐
892 tity but could not be, e.g., because their Don't Fragment
893 flag was set [ipFragFails].
894 With the IP6 keyword, statistics about IPv6 network traffic are
897 reported. Note that IPv6 statistics depend on sadc's option -S
898 IPV6 to be collected. The following values are displayed (for‐
899 mal SNMP names between square brackets):
900 irec6/s
902 The total number of input datagrams received from inter‐
903 faces per second, including those received in error
904 [ipv6IfStatsInReceives].
905 fwddgm6/s
907 The number of output datagrams per second which this en‐
908 tity received and forwarded to their final destinations
909 [ipv6IfStatsOutForwDatagrams].
910 idel6/s
912 The total number of datagrams successfully delivered per
913 second to IPv6 user-protocols (including ICMP) [ipv6IfS‐
914 tatsInDelivers].
915 orq6/s The total number of IPv6 datagrams which local IPv6 user-
917 protocols (including ICMP) supplied per second to IPv6 in
918 requests for transmission [ipv6IfStatsOutRequests]. Note
919 that this counter does not include any datagrams counted
920 in fwddgm6/s.
921 asmrq6/s
923 The number of IPv6 fragments received per second which
924 needed to be reassembled at this interface [ipv6IfStat‐
925 sReasmReqds].
926 asmok6/s
928 The number of IPv6 datagrams successfully reassembled per
929 second [ipv6IfStatsReasmOKs].
930 imcpck6/s
932 The number of multicast packets received per second by
933 the interface [ipv6IfStatsInMcastPkts].
934 omcpck6/s
936 The number of multicast packets transmitted per second by
937 the interface [ipv6IfStatsOutMcastPkts].
938 fragok6/s
940 The number of IPv6 datagrams that have been successfully
941 fragmented at this output interface per second [ipv6IfS‐
942 tatsOutFragOKs].
943 fragcr6/s
945 The number of output datagram fragments that have been
946 generated per second as a result of fragmentation at this
947 output interface [ipv6IfStatsOutFragCreates].
948 With the EIP6 keyword, statistics about IPv6 network errors are
951 reported. Note that IPv6 statistics depend on sadc's option -S
952 IPV6 to be collected. The following values are displayed (for‐
953 mal SNMP names between square brackets):
954 ihdrer6/s
956 The number of input datagrams discarded per second due to
957 errors in their IPv6 headers, including version number
958 mismatch, other format errors, hop count exceeded, errors
959 discovered in processing their IPv6 options, etc.
960 [ipv6IfStatsInHdrErrors]
961 iadrer6/s
963 The number of input datagrams discarded per second be‐
964 cause the IPv6 address in their IPv6 header's destination
965 field was not a valid address to be received at this en‐
966 tity. This count includes invalid addresses (e.g., ::0)
967 and unsupported addresses (e.g., addresses with unallo‐
968 cated prefixes). For entities which are not IPv6 routers
969 and therefore do not forward datagrams, this counter in‐
970 cludes datagrams discarded because the destination ad‐
971 dress was not a local address [ipv6IfStatsInAddrErrors].
972 iukwnp6/s
974 The number of locally-addressed datagrams received suc‐
975 cessfully but discarded per second because of an unknown
976 or unsupported protocol [ipv6IfStatsInUnknownProtos].
977 i2big6/s
979 The number of input datagrams that could not be forwarded
980 per second because their size exceeded the link MTU of
981 outgoing interface [ipv6IfStatsInTooBigErrors].
982 idisc6/s
984 The number of input IPv6 datagrams per second for which
985 no problems were encountered to prevent their continued
986 processing, but which were discarded (e.g., for lack of
987 buffer space) [ipv6IfStatsInDiscards]. Note that this
988 counter does not include any datagrams discarded while
989 awaiting re-assembly.
990 odisc6/s
992 The number of output IPv6 datagrams per second for which
993 no problem was encountered to prevent their transmission
994 to their destination, but which were discarded (e.g., for
995 lack of buffer space) [ipv6IfStatsOutDiscards]. Note that
996 this counter would include datagrams counted in fwddgm6/s
997 if any such packets met this (discretionary) discard cri‐
998 terion.
999 inort6/s
1001 The number of input datagrams discarded per second be‐
1002 cause no route could be found to transmit them to their
1003 destination [ipv6IfStatsInNoRoutes].
1004 onort6/s
1006 The number of locally generated IP datagrams discarded
1007 per second because no route could be found to transmit
1008 them to their destination [unknown formal SNMP name].
1009 asmf6/s
1011 The number of failures detected per second by the IPv6
1012 re-assembly algorithm (for whatever reason: timed out,
1013 errors, etc.) [ipv6IfStatsReasmFails]. Note that this is
1014 not necessarily a count of discarded IPv6 fragments since
1015 some algorithms can lose track of the number of fragments
1016 by combining them as they are received.
1017 fragf6/s
1019 The number of IPv6 datagrams that have been discarded per
1020 second because they needed to be fragmented at this out‐
1021 put interface but could not be [ipv6IfStatsOutFragFails].
1022 itrpck6/s
1024 The number of input datagrams discarded per second be‐
1025 cause datagram frame didn't carry enough data [ipv6IfS‐
1026 tatsInTruncatedPkts].
1027 With the NFS keyword, statistics about NFS client activity are
1030 reported. The following values are displayed:
1031 call/s Number of RPC requests made per second.
1033 retrans/s
1035 Number of RPC requests per second, those which needed to
1036 be retransmitted (for example because of a server time‐
1037 out).
1038 read/s Number of 'read' RPC calls made per second.
1040 write/s
1042 Number of 'write' RPC calls made per second.
1043 access/s
1045 Number of 'access' RPC calls made per second.
1046 getatt/s
1048 Number of 'getattr' RPC calls made per second.
1049 With the NFSD keyword, statistics about NFS server activity are
1052 reported. The following values are displayed:
1053 scall/s
1055 Number of RPC requests received per second.
1056 badcall/s
1058 Number of bad RPC requests received per second, those
1059 whose processing generated an error.
1060 packet/s
1062 Number of network packets received per second.
1063 udp/s Number of UDP packets received per second.
1065 tcp/s Number of TCP packets received per second.
1067 hit/s Number of reply cache hits per second.
1069 miss/s Number of reply cache misses per second.
1071 sread/s
1073 Number of 'read' RPC calls received per second.
1074 swrite/s
1076 Number of 'write' RPC calls received per second.
1077 saccess/s
1079 Number of 'access' RPC calls received per second.
1080 sgetatt/s
1082 Number of 'getattr' RPC calls received per second.
1083 With the SOCK keyword, statistics on sockets in use are reported
1086 (IPv4). The following values are displayed:
1087 totsck Total number of sockets used by the system.
1089 tcpsck Number of TCP sockets currently in use.
1091 udpsck Number of UDP sockets currently in use.
1093 rawsck Number of RAW sockets currently in use.
1095 ip-frag
1097 Number of IP fragments currently in queue.
1098 tcp-tw Number of TCP sockets in TIME_WAIT state.
1100 With the SOCK6 keyword, statistics on sockets in use are re‐
1103 ported (IPv6). Note that IPv6 statistics depend on sadc's op‐
1104 tion -S IPV6 to be collected. The following values are dis‐
1105 played:
1106 tcp6sck
1108 Number of TCPv6 sockets currently in use.
1109 udp6sck
1111 Number of UDPv6 sockets currently in use.
1112 raw6sck
1114 Number of RAWv6 sockets currently in use.
1115 ip6-frag
1117 Number of IPv6 fragments currently in use.
1118 With the SOFT keyword, statistics about software-based network
1121 processing are reported. The following values are displayed:
1122 total/s
1124 The total number of network frames processed per second.
1125 dropd/s
1127 The total number of network frames dropped per second be‐
1128 cause there was no room on the processing queue.
1129 squeezd/s
1131 The number of times the softirq handler function termi‐
1132 nated per second because its budget was consumed or the
1133 time limit was reached, but more work could have been
1134 done.
1135 rx_rps/s
1137 The number of times the CPU has been woken up per second
1138 to process packets via an inter-processor interrupt.
1139 flw_lim/s
1141 The number of times the flow limit has been reached per
1142 second. Flow limiting is an optional RPS feature that
1143 can be used to limit the number of packets queued to the
1144 backlog for each flow to a certain amount. This can help
1145 ensure that smaller flows are processed even though much
1146 larger flows are pushing packets in.
1147 With the TCP keyword, statistics about TCPv4 network traffic are
1150 reported. Note that TCPv4 statistics depend on sadc's option -S
1151 SNMP to be collected. The following values are displayed (for‐
1152 mal SNMP names between square brackets):
1153 active/s
1155 The number of times TCP connections have made a direct
1156 transition to the SYN-SENT state from the CLOSED state
1157 per second [tcpActiveOpens].
1158 passive/s
1160 The number of times TCP connections have made a direct
1161 transition to the SYN-RCVD state from the LISTEN state
1162 per second [tcpPassiveOpens].
1163 iseg/s The total number of segments received per second, includ‐
1165 ing those received in error [tcpInSegs]. This count in‐
1166 cludes segments received on currently established connec‐
1167 tions.
1168 oseg/s The total number of segments sent per second, including
1170 those on current connections but excluding those contain‐
1171 ing only retransmitted octets [tcpOutSegs].
1172 With the ETCP keyword, statistics about TCPv4 network errors are
1175 reported. Note that TCPv4 statistics depend on sadc's option -S
1176 SNMP to be collected. The following values are displayed (for‐
1177 mal SNMP names between square brackets):
1178 atmptf/s
1180 The number of times per second TCP connections have made
1181 a direct transition to the CLOSED state from either the
1182 SYN-SENT state or the SYN-RCVD state, plus the number of
1183 times per second TCP connections have made a direct tran‐
1184 sition to the LISTEN state from the SYN-RCVD state [tc‐
1185 pAttemptFails].
1186 estres/s
1188 The number of times per second TCP connections have made
1189 a direct transition to the CLOSED state from either the
1190 ESTABLISHED state or the CLOSE-WAIT state [tcpEstabRe‐
1191 sets].
1192 retrans/s
1194 The total number of segments retransmitted per second -
1195 that is, the number of TCP segments transmitted contain‐
1196 ing one or more previously transmitted octets [tcpRe‐
1197 transSegs].
1198 isegerr/s
1200 The total number of segments received in error (e.g., bad
1201 TCP checksums) per second [tcpInErrs].
1202 orsts/s
1204 The number of TCP segments sent per second containing the
1205 RST flag [tcpOutRsts].
1206 With the UDP keyword, statistics about UDPv4 network traffic are
1209 reported. Note that UDPv4 statistics depend on sadc's option -S
1210 SNMP to be collected. The following values are displayed (for‐
1211 mal SNMP names between square brackets):
1212 idgm/s The total number of UDP datagrams delivered per second to
1214 UDP users [udpInDatagrams].
1215 odgm/s The total number of UDP datagrams sent per second from
1217 this entity [udpOutDatagrams].
1218 noport/s
1220 The total number of received UDP datagrams per second for
1221 which there was no application at the destination port
1222 [udpNoPorts].
1223 idgmerr/s
1225 The number of received UDP datagrams per second that
1226 could not be delivered for reasons other than the lack of
1227 an application at the destination port [udpInErrors].
1228 With the UDP6 keyword, statistics about UDPv6 network traffic
1231 are reported. Note that UDPv6 statistics depend on sadc's op‐
1232 tion -S IPV6 to be collected. The following values are dis‐
1233 played (formal SNMP names between square brackets):
1234 idgm6/s
1236 The total number of UDP datagrams delivered per second to
1237 UDP users [udpInDatagrams].
1238 odgm6/s
1240 The total number of UDP datagrams sent per second from
1241 this entity [udpOutDatagrams].
1242 noport6/s
1244 The total number of received UDP datagrams per second for
1245 which there was no application at the destination port
1246 [udpNoPorts].
1247 idgmer6/s
1249 The number of received UDP datagrams per second that
1250 could not be delivered for reasons other than the lack of
1251 an application at the destination port [udpInErrors].
1252 The ALL keyword is equivalent to specifying all the keywords
1255 above and therefore all the network activities are reported.
1256 -o [ filename ]
1258 Save the readings in the file in binary form. Each reading is in
1259 a separate record. The default value of the filename parameter
1260 is the current standard system activity daily data file. If
1261 filename is a directory instead of a plain file then it is con‐
1262 sidered as the directory where the standard system activity
1263 daily data files are located. Option -o is exclusive of option
1264 -f. All the data available from the kernel are saved in the
1265 file (in fact, sar calls its data collector sadc with the option
1266 -S ALL. See sadc(8) manual page).
1267 -P { cpu_list | ALL }
1269 Report per-processor statistics for the specified processor or
1270 processors. cpu_list is a list of comma-separated values or
1271 range of values (e.g., 0,2,4-7,12-). Note that processor 0 is
1272 the first processor, and processor all is the global average
1273 among all processors. Specifying the ALL keyword reports sta‐
1274 tistics for each individual processor, and globally for all pro‐
1275 cessors. Offline processors are not displayed.
1276 -p, --pretty
1278 Make reports easier to read by a human. This option may be es‐
1279 pecially useful when displaying e.g., network interfaces or
1280 block devices statistics.
1281 -q [ keyword[,...] | ALL ]
1283 Report system load and pressure-stall statistics.
1284 Possible keywords are CPU, IO, LOAD, MEM and PSI".
1286 With the CPU keyword, CPU pressure statistics are reported. The
1288 following values are displayed:
1289 %scpu-10
1291 Percentage of the time that at least some runnable tasks
1292 were delayed because the CPU was unavailable to them,
1293 over the last 10 second window.
1294 %scpu-60
1296 Percentage of the time that at least some runnable tasks
1297 were delayed because the CPU was unavailable to them,
1298 over the last 60 second window.
1299 %scpu-300
1301 Percentage of the time that at least some runnable tasks
1302 were delayed because the CPU was unavailable to them,
1303 over the last 300 second window.
1304 %scpu Percentage of the time that at least some runnable tasks
1306 were delayed because the CPU was unavailable to them,
1307 over the last time interval.
1308 With the IO keyword, I/O pressure statistics are reported. The
1311 following values are displayed:
1312 %sio-10
1314 Percentage of the time that at least some tasks lost
1315 waiting for I/O, over the last 10 second window.
1316 %sio-60
1318 Percentage of the time that at least some tasks lost
1319 waiting for I/O, over the last 60 second window.
1320 %sio-300
1322 Percentage of the time that at least some tasks lost
1323 waiting for I/O, over the last 300 second window.
1324 %sio Percentage of the time that at least some tasks lost
1326 waiting for I/O, over the last time interval.
1327 %fio-10
1329 Percentage of the time during which all non-idle tasks
1330 were stalled waiting for I/O, over the last 10 second
1331 window.
1332 %fio-60
1334 Percentage of the time during which all non-idle tasks
1335 were stalled waiting for I/O, over the last 60 second
1336 window.
1337 %fio-300
1339 Percentage of the time during which all non-idle tasks
1340 were stalled waiting for I/O, over the last 300 second
1341 window.
1342 %fio Percentage of the time during which all non-idle tasks
1344 were stalled waiting for I/O, over the last time inter‐
1345 val.
1346 With the LOAD keyword, queue length and load averages statistics
1349 are reported. The following values are displayed:
1350 runq-sz
1352 Run queue length (number of tasks running or waiting for
1353 run time).
1354 plist-sz
1356 Number of tasks in the task list.
1357 ldavg-1
1359 System load average for the last minute. The load aver‐
1360 age is calculated as the average number of runnable or
1361 running tasks (R state), and the number of tasks in unin‐
1362 terruptible sleep (D state) over the specified interval.
1363 ldavg-5
1365 System load average for the past 5 minutes.
1366 ldavg-15
1368 System load average for the past 15 minutes.
1369 blocked
1371 Number of tasks currently blocked, waiting for I/O to
1372 complete.
1373 With the MEM keyword, memory pressure statistics are reported.
1376 The following values are displayed:
1377 %smem-10
1379 Percentage of the time during which at least some tasks
1380 were waiting for memory resources, over the last 10 sec‐
1381 ond window.
1382 %smem-60
1384 Percentage of the time during which at least some tasks
1385 were waiting for memory resources, over the last 60 sec‐
1386 ond window.
1387 %smem-300
1389 Percentage of the time during which at least some tasks
1390 were waiting for memory resources, over the last 300 sec‐
1391 ond window.
1392 %smem Percentage of the time during which at least some tasks
1394 were waiting for memory resources, over the last time in‐
1395 terval.
1396 %fmem-10
1398 Percentage of the time during which all non-idle tasks
1399 were stalled waiting for memory resources, over the last
1400 10 second window.
1401 %fmem-60
1403 Percentage of the time during which all non-idle tasks
1404 were stalled waiting for memory resources, over the last
1405 60 second window.
1406 %fmem-300
1408 Percentage of the time during which all non-idle tasks
1409 were stalled waiting for memory resources, over the last
1410 300 second window.
1411 %fmem Percentage of the time during which all non-idle tasks
1413 were stalled waiting for memory resources, over the last
1414 time interval.
1415 The PSI keyword is equivalent to specifying CPU, IO and MEM key‐
1418 words together and therefore all the pressure-stall statistics
1419 are reported.
1420 The ALL keyword is equivalent to specifying all the keywords
1422 above and therefore all the statistics are reported.
1423 -r [ ALL ]
1425 Report memory utilization statistics. The ALL keyword indicates
1426 that all the memory fields should be displayed. The following
1427 values may be displayed:
1428 kbmemfree
1430 Amount of free memory available in kilobytes.
1431 kbavail
1433 Estimate of how much memory in kilobytes is available for
1434 starting new applications, without swapping. The esti‐
1435 mate takes into account that the system needs some page
1436 cache to function well, and that not all reclaimable slab
1437 will be reclaimable, due to items being in use. The im‐
1438 pact of those factors will vary from system to system.
1439 kbmemused
1441 Amount of used memory in kilobytes (calculated as total
1442 installed memory - kbmemfree - kbbuffers - kbcached - kb‐
1443 slab).
1444 %memused
1446 Percentage of used memory.
1447 kbbuffers
1449 Amount of memory used as buffers by the kernel in kilo‐
1450 bytes.
1451 kbcached
1453 Amount of memory used to cache data by the kernel in
1454 kilobytes.
1455 kbcommit
1457 Amount of memory in kilobytes needed for current work‐
1458 load. This is an estimate of how much RAM/swap is needed
1459 to guarantee that there never is out of memory.
1460 %commit
1462 Percentage of memory needed for current workload in rela‐
1463 tion to the total amount of memory (RAM+swap). This num‐
1464 ber may be greater than 100% because the kernel usually
1465 overcommits memory.
1466 kbactive
1468 Amount of active memory in kilobytes (memory that has
1469 been used more recently and usually not reclaimed unless
1470 absolutely necessary).
1471 kbinact
1473 Amount of inactive memory in kilobytes (memory which has
1474 been less recently used. It is more eligible to be re‐
1475 claimed for other purposes).
1476 kbdirty
1478 Amount of memory in kilobytes waiting to get written back
1479 to the disk.
1480 kbanonpg
1482 Amount of non-file backed pages in kilobytes mapped into
1483 userspace page tables.
1484 kbslab Amount of memory in kilobytes used by the kernel to cache
1486 data structures for its own use.
1487 kbkstack
1489 Amount of memory in kilobytes used for kernel stack
1490 space.
1491 kbpgtbl
1493 Amount of memory in kilobytes dedicated to the lowest
1494 level of page tables.
1495 kbvmused
1497 Amount of memory in kilobytes of used virtual address
1498 space.
1499 -S Report swap space utilization statistics. The following values
1501 are displayed:
1502 kbswpfree
1504 Amount of free swap space in kilobytes.
1505 kbswpused
1507 Amount of used swap space in kilobytes.
1508 %swpused
1510 Percentage of used swap space.
1511 kbswpcad
1513 Amount of cached swap memory in kilobytes. This is mem‐
1514 ory that once was swapped out, is swapped back in but
1515 still also is in the swap area (if memory is needed it
1516 doesn't need to be swapped out again because it is al‐
1517 ready in the swap area. This saves I/O).
1518 %swpcad
1520 Percentage of cached swap memory in relation to the
1521 amount of used swap space.
1522 -s [ hh:mm[:ss] ]
1524 Set the starting time of the data, causing the sar command to
1525 extract records time-tagged at, or following, the time speci‐
1526 fied. The default starting time is 08:00:00. Hours must be
1527 given in 24-hour format. This option can be used only when data
1528 are read from a file (option -f).
1529 --sadc Indicate which data collector is called by sar. If the data
1531 collector is sought in PATH then enter "which sadc" to know
1532 where it is located.
1533 -t When reading data from a daily data file, indicate that sar
1535 should display the timestamps in the original local time of the
1536 data file creator. Without this option, the sar command displays
1537 the timestamps in the user's locale time.
1538 -u [ ALL ]
1540 Report CPU utilization. The ALL keyword indicates that all the
1541 CPU fields should be displayed. The report may show the follow‐
1542 ing fields:
1543 %user Percentage of CPU utilization that occurred while execut‐
1545 ing at the user level (application). Note that this field
1546 includes time spent running virtual processors.
1547 %usr Percentage of CPU utilization that occurred while execut‐
1549 ing at the user level (application). Note that this field
1550 does NOT include time spent running virtual processors.
1551 %nice Percentage of CPU utilization that occurred while execut‐
1553 ing at the user level with nice priority.
1554 %system
1556 Percentage of CPU utilization that occurred while execut‐
1557 ing at the system level (kernel). Note that this field
1558 includes time spent servicing hardware and software in‐
1559 terrupts.
1560 %sys Percentage of CPU utilization that occurred while execut‐
1562 ing at the system level (kernel). Note that this field
1563 does NOT include time spent servicing hardware or soft‐
1564 ware interrupts.
1565 %iowait
1567 Percentage of time that the CPU or CPUs were idle during
1568 which the system had an outstanding disk I/O request.
1569 %steal Percentage of time spent in involuntary wait by the vir‐
1571 tual CPU or CPUs while the hypervisor was servicing an‐
1572 other virtual processor.
1573 %irq Percentage of time spent by the CPU or CPUs to service
1575 hardware interrupts.
1576 %soft Percentage of time spent by the CPU or CPUs to service
1578 software interrupts.
1579 %guest Percentage of time spent by the CPU or CPUs to run a vir‐
1581 tual processor.
1582 %gnice Percentage of time spent by the CPU or CPUs to run a
1584 niced guest.
1585 %idle Percentage of time that the CPU or CPUs were idle and the
1587 system did not have an outstanding disk I/O request.
1588 -V Print version number then exit.
1590 -v Report status of inode, file and other kernel tables. The fol‐
1592 lowing values are displayed:
1593 dentunusd
1595 Number of unused cache entries in the directory cache.
1596 file-nr
1598 Number of file handles used by the system.
1599 inode-nr
1601 Number of inode handlers used by the system.
1602 pty-nr Number of pseudo-terminals used by the system.
1604 -W Report swapping statistics. The following values are displayed:
1606 pswpin/s
1608 Total number of swap pages the system brought in per sec‐
1609 ond.
1610 pswpout/s
1612 Total number of swap pages the system brought out per
1613 second.
1614 -w Report task creation and system switching activity. The follow‐
1616 ing values are displayed:
1617 proc/s Total number of tasks created per second.
1619 cswch/s
1621 Total number of context switches per second.
1622 -y Report TTY devices activity. The following values are displayed:
1624 rcvin/s
1626 Number of receive interrupts per second for current se‐
1627 rial line. Serial line number is given in the TTY col‐
1628 umn.
1629 xmtin/s
1631 Number of transmit interrupts per second for current se‐
1632 rial line.
1633 framerr/s
1635 Number of frame errors per second for current serial
1636 line.
1637 prtyerr/s
1639 Number of parity errors per second for current serial
1640 line.
1641 brk/s Number of breaks per second for current serial line.
1643 ovrun/s
1645 Number of overrun errors per second for current serial
1646 line.
1647 -z Tell sar to omit output for any devices for which there was no
1649 activity during the sample period.
1650
1653 The sar command takes into account the following environment variables:
1654 S_COLORS
1656 By default statistics are displayed in color when the output is
1657 connected to a terminal. Use this variable to change the set‐
1658 tings. Possible values for this variable are never, always or
1659 auto (the latter is equivalent to the default settings).
1660 Please note that the color (being red, yellow, or some other
1661 color) used to display a value is not indicative of any kind of
1662 issue simply because of the color. It only indicates different
1663 ranges of values.
1664 S_COLORS_SGR
1666 Specify the colors and other attributes used to display statis‐
1667 tics on the terminal. Its value is a colon-separated list of
1668 capabilities that defaults to
1669 C=33;22:H=31;1:I=32;22:M=35;1:N=34;1:R=31;22:Z=34;22. Supported
1670 capabilities are:
1671 C= SGR (Select Graphic Rendition) substring for comments in‐
1673 serted in the binary daily data files.
1674 H= SGR substring for percentage values greater than or equal
1676 to 75%.
1677 I= SGR substring for item names or values (eg. network in‐
1679 terfaces, CPU number...)
1680 M= SGR substring for percentage values in the range from 50%
1682 to 75%.
1683 N= SGR substring for non-zero statistics values.
1685 R= SGR substring for restart messages.
1687 Z= SGR substring for zero values.
1689 S_TIME_DEF_TIME
1691 If this variable exists and its value is UTC then sar will save
1692 its data in UTC time (data will still be displayed in local
1693 time). sar will also use UTC time instead of local time to de‐
1694 termine the current daily data file located in the /var/log/sa
1695 directory. This variable may be useful for servers with users
1696 located across several timezones.
1697 S_TIME_FORMAT
1699 If this variable exists and its value is ISO then the current
1700 locale will be ignored when printing the date in the report
1701 header. The sar command will use the ISO 8601 format (YYYY-MM-
1702 DD) instead. The timestamp will also be compliant with ISO 8601
1703 format.
1704
1707 sar -u 2 5
1708 Report CPU utilization for each 2 seconds. 5 lines are dis‐
1709 played.
1710 sar -I 14 -o int14.file 2 10
1712 Report statistics on IRQ 14 for each 2 seconds. 10 lines are
1713 displayed. Data are stored in a file called int14.file.
1714 sar -r -n DEV -f /var/log/sa/sa16
1716 Display memory and network statistics saved in daily data file
1717 sa16.
1718 sar -A Display all the statistics saved in current daily data file.
1720
1723 /proc filesystem must be mounted for the sar command to work.
1724 All the statistics are not necessarily available, depending on the ker‐
1726 nel version used. sar assumes that you are using at least a 2.6 ker‐
1727 nel.
1728 Although sar speaks of kilobytes (kB), megabytes (MB)..., it actually
1730 uses kibibytes (kiB), mebibytes (MiB)... A kibibyte is equal to 1024
1731 bytes, and a mebibyte is equal to 1024 kibibytes.
1732
1735 /var/log/sa/saDD
1736 /var/log/sa/saYYYYMMDD
1737 The standard system activity daily data files and their default
1738 location. YYYY stands for the current year, MM for the current
1739 month and DD for the current day.
1740 /proc and /sys contain various files with system statistics.
1742
1745 Sebastien Godard (sysstat <at> orange.fr)
1746
1749 sadc(8), sa1(8), sa2(8), sadf(1), sysstat(5), pidstat(1), mpstat(1),
1750 iostat(1), vmstat(8)
1751 https://github.com/sysstat/sysstat
1753 http://pagesperso-orange.fr/sebastien.godard/
1754Linux AUGUST 2020 SAR(1)