System Accounting Files

The /var/adm directory contains the active data collection files. The following table describes the accounting files in this directory.

Table 17.7. Files in the /var/adm Directory

File

Description

dtmp

Output from the acctdusg program

fee

Output from the chargefee program, which are the ASCII tacct records

pacct

Active process accounting file

pacct n

Process accounting files that are switched by running the turnacct script

Spacct n.MMDD

Process accounting files for MMDD during execution of the runacct script

The /var/adm/acct directory contains the nite, sum, and fiscal directories. These directories contain the actual data collection files. For example, the nite directory contains files that are reused daily by the runacct script. A brief summary of the files in the /var/adm/acct/nite directory follows.

Table 17.8. Files in the /var/adm/acct/nite Directory

File

Description

active

Used by the runacct script to record progress and print warning and error messages

active.MMDD

Same as the active file after the runacct script detects an error

cms

ASCII total command summary used by the prdaily script

ctacct. MMDD

Connect accounting records in tacct.h format

ctmp

Output of acctcon1 program, which consists of connect session records in ctmp.h format (acctcon1 and acctcon2 are provided for compatibility purposes)

daycms

ASCII daily command summary used by the prdaily script

daytacct

Total accounting records for one day in tacct.h format

disktacct

Disk accounting records in tacct.h format, created by the dodisk script

fd2log

Diagnostic output during execution of the runacct script

lastdate

Last day the runacct script executed (in date +%m%d format)

lineuse

tty line usage report used by the prdaily script

lock

Used to control serial use of the runacct script

log

Diagnostic output from the acctcon program

log .MMDD

Same as the log file after the runacct script detects an error

owtmpx

Previous day's wtmpx file

reboots

Beginning and ending dates from the wtmpx file, and a listing of reboots

statefile

Used to record current state during execution of the runacct script

tmpwtmp

wtmpx file corrected by the wtmpfix program

wtmperror

Contains wtmpfix error messages

wtmperror MMDD

Same as the wtmperror file after the runacct script detects an error

wtmp MMDD

The runacct script's copy of the wtmpx file

The sum directory contains the cumulative summary files updated by the runacct script and used by the monacct script. The following table summarizes the files in the /var/adm/acct/sum directory.

Table 17.9. Files in the /var/adm/acct/sum Directory

File

Description

cms

Total command summary file for current fiscal period in binary format

cmsprev

Command summary file without latest update

daycms

Command summary file for the day's usage in internal summary format

loginlog

Record of last date each user logged in; created by the lastlogin script and used in the prdaily script

rprt. MMDD

Saved output of prdaily script

tacct

Cumulative total accounting file for current fiscal period

tacctprev

Same as the tacct file without latest update

tacct. MMDD

Total accounting file for MMDD

The fiscal directory contains periodic summary files that are created by the monacct script. The following table summarizes the files in the /var/adm/acct/fiscal directory.

Table 17.10. Files in the /var/adm/acct/fiscal Directory

File

Description

cms n

Total command summary file for fiscal period n in internal summary format

fiscrpt n

Report similar to rprt n for fiscal period n

tacct n

Total accounting file for fiscal period n

Files Produced by the runacct Script

The following table summarizes the most useful files produced by the runacct script. These files are found in the /var/adm/acct directory.

Table 17.11. Files Created by the runacct Script

File

Description

nite/daytacct

The total accounting file for the day in tacct.h format.

nite/lineuse

The runacct script calls the acctcon program to gather data on terminal line usage from the /var/adm/acct/nite/tmpwtmp file and writes the data to the /var/adm/acct/nite/lineuse file. The prdaily script uses this data to report line usage. This report is especially useful for detecting bad lines. If the ratio between the number of logouts to logins is greater than three to one, the line is very likely failing.

sum/cms

This file is the accumulation of each day's command summaries. The accumulation restarts when the monacct script is executed. The ASCII version is the nite/cms file.

sum/daycms

The runacct script calls the acctcms program to process the commands used during the day to create the Daily Command Summary report and stores the data in the /var/adm/acct/sum/daycms file. The ASCII version is the /var/adm/acct/nite/daycms file.

sum/loginlog

The runacct script calls the lastlogin script to update the last date logged in for the logins in the /var/adm/acct/sum/loginlog file. The lastlogin command also removes from this file any logins that are no longer valid.

sum/rprt. MMDD

Each execution of the runacct script saves a copy of the daily report that was printed by the prdaily script.

sum/tacct

Contains the accumulation of each day's nite/daytacct data and is used for billing purposes. The monacct script restarts accumulating this data each month or fiscal period.