log.

log: (with few formatting changes) # Program class run_time(ns) memory(bytes) 1 Core system 12 1534324 NE 2 Openoffice user 20 3456372 3 Winamp user 14 7635567 4 Core system 15 1235545 NE 5 Mozilla user 20 12463456 6 Openoffice user 15 3476372 7 Ncc root 13 3456234 8 Core system 18 1634324 NE 9 Openoffice user 20 3776872 10 Winamp user 20 7633567 11 Mozila user 20 18463456 12 Core system 14 5634324 NE 13 Ncc root 20 5456234 14 Winamp user 15 4643567 15 Core system 13 8456234 NE 16 Ncc root 25 7456234 17 Openoffice user 20 4776872 18 Ncc root 23 6456234 19 Winamp user 15 4623567 20 Mozila user 20 19463456 21 Core system 40 18456234 EETO 22 Openoffice user 18 4776872 23 Mozila user 19 23463456 24 Winamp user 13 4613567 25 Core system 35 9456234 EENE 26 Core system 13 3456234 NE 27 Core system 10 2456234 NE

exit_type TO NE TO TO TO TO TO TO TO NE ETO TO ENE NE TO NE NE NE

question 1 output of the columns # and Program answer 1 awk {print $1,$2} log.log # Program 1 Core 2 Openoffice 3 Winamp 4 Core 5 Mozilla 6 Openoffice 7 Ncc 8 Core

9 Openoffice 10 Winamp 11 Mozila 12 Core 13 Ncc 14 Winamp 15 Core 16 Ncc 17 Openoffice 18 Ncc 19 Winamp 20 Mozila 21 Core 22 Openoffice 23 Mozila 24 Winamp 25 Core 26 Core 27 Core question 2 output of the columns Program, class and exit_type answer 2 awk {print $2,$3,$6} log.txt Program class exit_type Core system NE Openoffice user TO Winamp user NE Core system NE Mozilla user TO Openoffice user TO Ncc root TO Core system NE Openoffice user TO Winamp user TO Mozila user TO Core system NE Ncc root TO Winamp user NE Core system NE Ncc root ETO Openoffice user TO Ncc root ENE Winamp user NE Mozila user TO

Core system EETO Openoffice user NE Mozila user NE Winamp user NE Core system EENE Core system NE Core system NE question 3 rows where class is System answer 3 awk {if($3==system) print $0} log.txt or awk '$3=="system"' log.log 1 Core system 12 1534324 NE 4 Core system 15 1235545 NE 8 Core system 18 1634324 NE 12 Core system 14 5634324 NE 15 Core system 13 8456234 NE 21 Core system 40 18456234 EETO 25 Core system 35 9456234 EENE 26 Core system 13 3456234 NE 27 Core system 10 2456234 NE question 4 output same in input but displays start_time instead of run_time whose value is the accumulated values of run_time until the current row (excluding current row) answer 4 4.txt (comment the second or third line. Third line is better because it prints with tabs): BEGIN{print "# program class start_time memory exit_type";x=0;} # NR!=1{print $1,$2,$3,x,$5,$6; x+=$4;} NR!=1{printf("%i %s %s %i %i %s\n",$1,$2,$3,x,$5,$6); x+=$4;} run command in bash: awk -f '4.txt' log.log output: # program class start_time memory exit_type 1 Core system 0 1534324 NE 2 Openoffice user 12 3456372 TO 3 Winamp user 32 7635567 NE 4 Core system 46 1235545 NE 5 Mozilla user 61 12463456 TO 6 Openoffice user 81 3476372 TO 7 Ncc root 96 3456234 TO 8 Core system 109 1634324 NE 9 Openoffice user 127 3776872 TO 10 Winamp user 147 7633567 TO 11 Mozila user 167 18463456 TO

12 Core system 187 5634324 NE 13 Ncc root 201 5456234 TO 14 Winamp user 221 4643567 NE 15 Core system 236 8456234 NE 16 Ncc root 249 7456234 ETO 17 Openoffice user 274 4776872 TO 18 Ncc root 294 6456234 ENE 19 Winamp user 317 4623567 NE 20 Mozila user 332 19463456 TO 21 Core system 352 18456234 EETO 22 Openoffice user 392 4776872 NE 23 Mozila user 410 23463456 NE 24 Winamp user 429 4613567 NE 25 Core system 442 9456234 EENE 26 Core system 477 3456234 NE 27 Core system 490 2456234 NE question 5 same as question4 but with additional final row with the accumlated running time of rows of the same class answer 5 5.txt: BEGIN{print "# program class start_time memory exit_type";x=0;root_rt=0;system_rt=0;user_rt=0;} NR!=1{ printf("%i %s %s %i %i %s\n",$1,$2,$3,x,$5,$6) x+=$4 } $3=="root"{root_rt+=$4} $3=="system"{system_rt+=$4} $3=="user"{user_rt+=$4} END{ printf("root: %i, system: %i, user: %i \n",root_rt,system_rt,user_rt); } run command in bash: awk -f '5.txt' log.log output: # program class start_time memory exit_type 1 Core system 0 1534324 NE 2 Openoffice user 12 3456372 TO 3 Winamp user 32 7635567 NE 4 Core system 46 1235545 NE 5 Mozilla user 61 12463456 TO 6 Openoffice user 81 3476372 TO 7 Ncc root 96 3456234 TO 8 Core system 109 1634324 NE 9 Openoffice user 127 3776872 TO

10 Winamp user 147 7633567 TO 11 Mozila user 167 18463456 TO 12 Core system 187 5634324 NE 13 Ncc root 201 5456234 TO 14 Winamp user 221 4643567 NE 15 Core system 236 8456234 NE 16 Ncc root 249 7456234 ETO 17 Openoffice user 274 4776872 TO 18 Ncc root 294 6456234 ENE 19 Winamp user 317 4623567 NE 20 Mozila user 332 19463456 TO 21 Core system 352 18456234 EETO 22 Openoffice user 392 4776872 NE 23 Mozila user 410 23463456 NE 24 Winamp user 429 4613567 NE 25 Core system 442 9456234 EENE 26 Core system 477 3456234 NE 27 Core system 490 2456234 NE root: 81, system: 170, user: 249