1ACCT(5) File Formats Manual ACCT(5)
2
6 acct - execution accounting file
7
9 #include <sys/acct.h>
10
12 Acct(2) causes entries to be made into an accounting file for each
13 process that terminates. The accounting file is a sequence of entries
14 whose layout, as defined by the include file is:
15 /* Copyright (C) 1996-1999, 2007, 2012 Free Software Foundation, Inc.
17 This file is part of the GNU C Library.
18 The GNU C Library is free software; you can redistribute it and/or
20 modify it under the terms of the GNU Lesser General Public
21 License as published by the Free Software Foundation; either
22 version 2.1 of the License, or (at your option) any later version.
23 The GNU C Library is distributed in the hope that it will be useful,
25 but WITHOUT ANY WARRANTY; without even the implied warranty of
26 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
27 Lesser General Public License for more details.
28 You should have received a copy of the GNU Lesser General Public
30 License along with the GNU C Library; if not, see
31 <http://www.gnu.org/licenses/>. */
32 #ifndef _SYS_ACCT_H
34 #define _SYS_ACCT_H 1
35 #include <features.h>
37 #include <endian.h>
39 #define __need_time_t
40 #include <time.h>
41 #include <sys/types.h>
42 __BEGIN_DECLS
44 #define ACCT_COMM 16
46 /*
48 comp_t is a 16-bit "floating" point number with a 3-bit base 8
49 exponent and a 13-bit fraction. See linux/kernel/acct.c for the
50 specific encoding system used.
51 */
52 typedef u_int16_t comp_t;
54 struct acct
56 {
57 char ac_flag; /* Flags. */
58 u_int16_t ac_uid; /* Real user ID. */
59 u_int16_t ac_gid; /* Real group ID. */
60 u_int16_t ac_tty; /* Controlling terminal. */
61 u_int32_t ac_btime; /* Beginning time. */
62 comp_t ac_utime; /* User time. */
63 comp_t ac_stime; /* System time. */
64 comp_t ac_etime; /* Elapsed time. */
65 comp_t ac_mem; /* Average memory usage. */
66 comp_t ac_io; /* Chars transferred. */
67 comp_t ac_rw; /* Blocks read or written. */
68 comp_t ac_minflt; /* Minor pagefaults. */
69 comp_t ac_majflt; /* Major pagefaults. */
70 comp_t ac_swaps; /* Number of swaps. */
71 u_int32_t ac_exitcode; /* Process exitcode. */
72 char ac_comm[ACCT_COMM+1]; /* Command name. */
73 char ac_pad[10]; /* Padding bytes. */
74 };
75 struct acct_v3
78 {
79 char ac_flag; /* Flags */
80 char ac_version; /* Always set to ACCT_VERSION */
81 u_int16_t ac_tty; /* Control Terminal */
82 u_int32_t ac_exitcode; /* Exitcode */
83 u_int32_t ac_uid; /* Real User ID */
84 u_int32_t ac_gid; /* Real Group ID */
85 u_int32_t ac_pid; /* Process ID */
86 u_int32_t ac_ppid; /* Parent Process ID */
87 u_int32_t ac_btime; /* Process Creation Time */
88 float ac_etime; /* Elapsed Time */
89 comp_t ac_utime; /* User Time */
90 comp_t ac_stime; /* System Time */
91 comp_t ac_mem; /* Average Memory Usage */
92 comp_t ac_io; /* Chars Transferred */
93 comp_t ac_rw; /* Blocks Read or Written */
94 comp_t ac_minflt; /* Minor Pagefaults */
95 comp_t ac_majflt; /* Major Pagefaults */
96 comp_t ac_swaps; /* Number of Swaps */
97 char ac_comm[ACCT_COMM]; /* Command Name */
98 };
99 enum
102 {
103 AFORK = 0x01, /* Has executed fork, but no exec. */
104 ASU = 0x02, /* Used super-user privileges. */
105 ACORE = 0x08, /* Dumped core. */
106 AXSIG = 0x10 /* Killed by a signal. */
107 };
108 #if __BYTE_ORDER == __BIG_ENDIAN
110 # define ACCT_BYTEORDER 0x80 /* Accounting file is big endian. */
111 #else
112 # define ACCT_BYTEORDER 0x00 /* Accounting file is little endian. */
113 #endif
114 #define AHZ 100
116 /* Switch process accounting on and off. */
119 extern int acct (const char *__filename) __THROW;
120 __END_DECLS
122 #endif /* sys/acct.h */
124 If the process does an exec(2), the first 10 characters of the filename
126 appear in ac_comm. The accounting flag contains bits indicating
127 whether exec(2) was ever accomplished, and whether the process ever had
128 super-user privileges.
129
131 acct(2), sa(1)
132 ACCT(5)