Parts of the Process Accounting System

• The IRIX kernel writes a record of each process on the system that terminates into the file /var/adm/pacct. The file contains one record per terminated process, organized according to the format defined in /usr/include/sys/acct.h.

  You must specifically turn on this function. See "Turning on Process Accounting".

• Once process accounting is turned on, the cron program executes several accounting commands, as specified in /var/spool/cron/crontabs/adm and /var/spool/crontabs/root. The commands in adm perform monthly accounting (monacct), check the size of the pacct file (ckpacct), and provide a daily accounting of processes and connect time (runacct). The root crontab file runs the dodisk program, which provides a report on current disk usage. These commands run automatically when process accounting is turned on.

• The login and init programs record connect sessions by writing records into /etc/wtmp. This happens by default, as long as the wtmp file exists.

• Records of date changes, reboots, and shutdowns are copied from /etc/utmp to /etc/wtmp by the acctwtmp command.

• The acctwtmp utility is automatically called by runacct, /usr/lib/acct/startacct, and /usr/lib/shutacct, once process accounting is turned on.

• The disk utilization programs acctdusg and diskusg break down disk usage by login and prepare reports. For more information on disk usage quotas, see "IRIX Admin: Disks and Filesystems." These programs are run by the dodisk script.