dump-acct
dump-acct
dumps some of the contents of one or more acct
files in human readable form. Usage:
dump-acct [
opts]
files
Unless called with the --raw
option, it prints a table with the
following fields, separated by vertical bars(|
):
ac_comm
ac_version
acct
file format
ac_utime
ac_stime
ac_etime
ac_uid
ac_gid
ac_mem
ac_io
ac_pid
ac_ppid
All times will be given in platform dependent units (“AHZ
”).
Not all of the above columns will actually appear, depending on what
information your operating system provides in it's struct acct
.
--ahz
hzAHZ
should be (in Hertz).
This option is useful if you are trying to view an acct
file
created on another machine which has a different value for AHZ
.
--byteswap
--raw
output.
--format
--raw
option.
-n
num--num
num--raw
) to print.
-r
--reverse
-R
--raw
-h
--help
dump-acct
's usage string and default location of
the accouning file to standard output.
--byteswap
and --format
options are only available with
Linux multiformat support. They only affect output with
the --raw
option, format and byte order of the input are
automatically detected.
Thus they are useful to convert between different file formats.
The --ahz
option affects input and output (except for v3 file
format, which by definition is fixed to AHZ=100
).
If you ever need to convert between different AHZ
values,
use a two-step process:
First convert to v3 format with the old AHZ
value, then
convert to the desired output format with the new AHZ
setting.