acct

• Switch process accounting on or off

  • If given a filename, turned on

  • If NULL, turned off

• Record is appended to the accounting file for each exiting process

  • Process name, UID, TTY, process time, IO blocks

• Must be root, and accounting file must already exist

• Structure of the file is described in </usr/include/linux/acct.h>

    my $acfile = "/root/acct.$$";
    open F, "> $acfile" or die;
    close F;

    syscall(&SYS_acct, $acfile) == 0 or die;

    sleep 60;

    syscall(&SYS_acct, undef) == 0 or die;